4.2.3.2.1 ES8+ 初始化安全通道
TC_eUICC_ES8+.InitialiseSecureChannel
-man 人工切片
- 终态
- ok `_ok` 复用(结构 A1-A7 PASS;`_ok` run 无厂商错误行)
- ErrorCount
- 0
- 执行 job
- 20261007_132628:12b84ab51cc746adaf2741c35c01418c
- html_run
- 20261007_132628
- 包 sha256
- 4f7d22b8a8a6daab…
- 包大小
- 243.5 KB
日志源:logs/20261007_132628/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.html
-cas 盲生成
- 终态
- failed 纯 native 零卡态前置(N0)
- ErrorCount
- 45
- 执行 job
- 1627bd881a5f49a1b9de112360a166cf
- html_run
- 1627bd88_gapfix1
- 包 sha256
- 83d84181fd8f41e0…
- 包大小
- 834.6 KB
- 判定
- RERUN
- 路由
- native_N0
- 状态轴
- execution=red_verify / place=not_attempted / release=not_ready / card_state=n/a
差异概览(机械口径)
闭包文件层(l1)
man 34 / cas 82 个 JS;共同 31,一致 30,man-only 3,cas-only 51
命令序列层(l2)
man 59 / cas 0 条命令;完全一致 0,核心一致 0,长度尾部差 0,man-only 59,cas-only 0
规范覆盖(l3)
spec_steps 0,缺失 REQ 1 项,checkData 15 次,计数缺口 5,物化 DEFICIT,执行 FAIL
断言自证(attestation)
js 断言 11 条 / 绑定层 9 条 / 缺口 0
机械差异分类
| 轴 | 说明 | 计数 |
|---|---|---|
| RUN_DIFF | man 通过 / cas 失败 | 1 |
| SCRIPT_DIALECT | 闭包文件差:man-only 3 / cas-only 51 | 54 |
| GEN_DIFF | 命令序列差:man-only 59 / cas-only 0;REQ 覆盖缺口:['**RQ31_162/RQ31_163**--PIR 返回与 euiccSignPIR 签名)'] | 60 |
对比报告
4.2.3.2.1 TC_eUICC_ES8+.InitialiseSecureChannel — -man ↔ -cas diff 报告
交付形态说明:本报告随专家交付包分发——-man/-cas脚本包 zip 与 190server HTML 执行日志已内联至packages/、evidence-html/,相应路径已相对化;TTR、spec_intl、caseir 等仓内留痕仍为生成机原始路径(未随包)。
- 生成时间:2026-10-08 22:57:11 |引擎:holiday-blk5/0.1|配对状态:
PAIRED - 分母口径:卡侧 61 之一
1. 配对与包
| 侧 | 包/源 | sha256 | 源类型 | 入口用例 |
|---|---|---|---|---|
-man | 4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-man.zip | 4f7d22b8a8a6daab9c309b24bc163d162b96a30d267360e2222a2cecfa9c8dfa | zip | TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation |
-cas | 4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-cas.zip | 83d84181fd8f41e04adb2e5b3c6909e0439bc9c5ab84406979a1e633d5c6207e | zip | — |
- man 源路径:
../packages/man/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-man.zip - cas 源路径:
../packages/cas/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-cas.zip - 上游来源:{"man_ledger": true, "cas_ledger": true, "naming_map": true, "html_probe": true, "man_package": true, "cas_package": true}
- 适用性:naming-map=
M["M", "M", "M", "M", "M"];caseir=M
2. 执行摘要(双方 job/终态)
| 侧 | 终态/计划 | 备注 | ErrorCount | job_id | 业务状态 | TTR | 诊断包 |
|---|---|---|---|---|---|---|---|
-man | ok | _ok 复用(结构 A1-A7 PASS;_ok run 无厂商错误行) | 0 | 20261007_132628:12b84ab51cc746adaf2741c35c01418c | — | /Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/logs/20260907_182247_ok/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.ttr | — |
-cas | failed | 纯 native 零卡态前置(N0) | 45 | 1627bd881a5f49a1b9de112360a166cf | — | /Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/logs/1627bd88_gapfix1/result/TC_eUICC_ES8_InitialiseSecureChannel/TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps.ttr | — |
- cas 块4账本:decision=
RERUN;route=native_N0;live 事件 2 条(4.6 波次进行中;以块4终版账本为准) - cas 4.6 波次最新执行:terminal=
failed;stage=cas_gapfix_rerun;job=1627bd881a5f49a1b9de112360a166cf;gaps=["gapfix-rerun:job 终态 succeeded,业务判 failed(error_count=4);failed 亦为有效终态,如实登记"] - cas 失败归因引用(块4):
b3-attribution.md - cas 证据来源分层:
RERUN→ 本轮 4.6 波次执行
3. HTML 执行日志状态
-man:NATIVE(../evidence/4.2.3.2.1/man/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.html;sha2561b51d38dfaf867c24d1f1d725c9bdd2ffa757d51f74f904cb6b496dca9385540;135916 bytes)-cas:NATIVE(../evidence/4.2.3.2.1/cas/TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps.html;sha256eb0c4dc337cf804e285e44bf92075d8c5a825522614853a7f5be3dc2930f6bfc;12865 bytes)- 纪律:原生缺失 →
HTML_UNAVAILABLE显式阻断(附探针结论);派生件仅标DERIVED_NOT_NATIVE,不冒充原生。
4. L1 脚本/依赖/命名差异(源文件闭包级)
- 闭包规模:man 34 文件 / cas 82 文件;同名 31(字节同 30,内容异 1)
- 同名内容异:
Import/TestCase_SGP_23.js - man-only 文件 3:
ESIM_TEST_SGP_23.UCE,ESIM_TEST_SGP_23.sol,MANIFEST.json - cas-only 文件 51:
Import/CapInfo.js,Import/ExecuteTestCase.js,Import/ExecuteTestCase_CSC.js,Import/ExecuteTestCase_LoadProfile_via_bip.js,Import/ExecuteTestCase_Local_Management.js,Import/ExecuteTestCase_Non_Telecom_Profile.js,Import/ExecuteTestCase_Performance.js,Import/ExecuteTestCase_PressureTest.js,Import/ExecuteTestCase_ProfileFormatTest_V_2_3_1.js,Import/ExecuteTestCase_ProfileServicesListTest.js… - 注:man 包=切片最小闭包(
script/投影);cas 包=slice_native 全工程投影(厂商参照闭包+生成体)。闭包规模差为打包形态差异;同名文件字节差集中于Import/TestCase_SGP_23.js(TC 入口本体)。
4.1 入口代码对照
- 行数:man 273 / cas 311;字符:man 11827 / cas 23930
- man 顶层调用 Top:[["TestStepStart2", 50], ["TraceStart", 5], ["ResetCard", 5], ["TS_TERMINAL_CAPABILITY_cmd", 5], ["TS_MANAGE_CHANNEL_OPEN", 5], ["TS_SELECT", 5], ["RSP_profile_load_procedure_LPAd", 5], ["ES10b_GetEUICCInfo1", 5], ["ES10b_GetEUICCChallenge", 5], ["ES10b_AuthenticateServer", 5]]
- cas bind 调用:[["checkData", 15], ["sendApdu", 7]]
| 方言映射对 | 命中数 |
|---|---|
| ResetCard() ↔ bind.resetAndAtr() | 5 |
| TS_*_cmd() ↔ bind.* 命令封装 | 15 |
unified diff(截断预览)
--- man
+++ cas
@@ -1,272 +1,310 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation + TC_eUICC_ES8_InitialiseSecureChannel_02_Error_Invalid_SMDP_Signature + TC_eUICC_ES8_InitialiseSecureChannel_03_Error_Invalid_Transaction_Identifier + TC_eUICC_ES8_InitialiseSecureChannel_04_Error_Invalid_CRT_Values + TC_eUICC_ES8_InitialiseSecureChannel_05_Error_InitialiseSecureChannel_request_while_Secure_Channel_Session_is_ongoing (extracted verbatim)
-
-function TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation()
-{
-
- tracenamestr = "测试目的:执行InitialiseSecureChannel,remoteOpId为#INVALID_REMOTE_OP_ID";
- curDis.TraceStart(sno++,tracenamestr);
-
- curDis.TestStepStart2(stno++,"复位;");
- ResetCard();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送Terminal Capability命令;");
- TS_TERMINAL_CAPABILITY_cmd();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送MANAGE_CHANNEL命令,打开辅助逻辑通道;");
- TS_MANAGE_CHANNEL_OPEN();
-
- curLogicChannel = 1;
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送SELECT命令,选择ISD-R;");
- TS_SELECT("Select ISD",ISD_R_AID,"9000");
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行GetEuiccInfo1Request;");
- var Profile_load_procedure = new RSP_profile_load_procedure_LPAd(PROFILE_OPERATIONAL1_DATA);
- Profile_load_procedure.ICCID = ICCID_OP_PROF1;
- Profile_load_procedure.ES10b_GetEUICCInfo1();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行GetEuiccChallengeRequest;");
- Profile_load_procedure.ES10b_GetEUICCChallenge();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行AuthenticateServerRequest;");
- ctxParamsForCommonAuthentication = "A13A800400000000A1288003050000810308000082030100008303010000840302000085030200008603090000870302010082080000000011111111";
- Profile_load_procedure.serverAddress = TEST_DP_ADDRESS1;
- Profile_load_procedure.ES10b_AuthenticateServer();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行PrepareDownloadRequest;");
- Profile_load_procedure.ES10b_PrepareDownload();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行GetEuiccDataRequest(GetEID);");
- Profile_load_procedure.ES10b_GetEID();
-
- curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行BoundProfilePackage;--Invalid RemoteOpId");
- Profile_load_procedure.hostId = "47534D4120534D2D5858";
- Profile_load_procedure.isErrorTest=true;
- Profile_load_procedure.remoteOpId ="08";
- Profile_load_procedure.bppCommandId="00";
- Profile_load_procedure.errorReason="05";
- Profile_load_procedure.simaResponse = "";
- Profile_load_procedure.ES10b_LoadBoundProfilePackage();
-
- var errorReason = Profile_load_procedure.profInstallationResult.profileInstallationResultData.finalResult.ErrorResult.errorReason;
- curStrHandle.CheckData("05", errorReason, "errorReason");
-
- RecoverCard();
+// Author: 卡思Cas智能体
+// Date: 20261005-152741
+// Function: (purpose 原文未由 SGP.23 该 TC 提供,corpus vacuum 登记)TC_eUICC_ES8+.InitialiseSecureChannel,Test Sequence #01–#05(全部 Error 序列);见 steps 前缀,适用性 M。
+// Test points: S4-C1 SW;S4-C2 SW;S4-C2 resp present;S8-C1 SW;S8-C2 SW;S8-C2 resp present;S12-C1 SW
+// S12-C2 SW;S12-C2 resp present;S16-C1 SW;S16-C2 SW;S16-C2 resp present;S20-C1 SW;S21-C1 SW
+// S22-C1 SW acceptable
+// 本函数由 CaseIR 4.2.3.2.1 编译生成(fullwave-blindgen-live-70,SGP.23 v1.16 × SGP.22 v2.7):字节权威=CaseIR,非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 M:编译期门,运行时由 harness 环境前置承担。
+// PRECONDITION (declared, NOT compiled): initial_conditions 缺语料过程体(Annex C.2 absent from input package, corpus vacuum): IC 序列属测试工具/卡态编排责任,本脚本不虚构初始化步骤;语义影响见 CaseIR open_items。
+// GIC 通信初始化+ISD-R 选择+相互认证+End User Confirmation+PrepareDownload(#PREP_DOWNLOAD_NO_CC): declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// GIC-sub PROC_EUICC_INITIALIZATION_SEQUENCE(R2 闭合,K_annexC2_procs 表1256:RESET/[SELECT_MF]/[TERMINAL_CAPABILITY_LPAd]/[TERMINAL_PROFILE]): declared unexpanded (no fabricated bytes; provenance = expansion_source).
+// GIC-sub PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR(R2 闭合,K_annexC2_procs 表1258:[MANAGE_CHANNEL_OPEN]/MTD_SELECT(#ISD_R_AID)): declared unexpanded (no fabricated bytes; provenance = expansion_source).
+function TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps() {
+ var bind = curBind;
+
+ // 步骤 1:Seq#01 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA>(tc_step;non_wire)
+ // test-tool internal preparation (no APDU face): runtime-domain
+ // values per CaseIR unresolved (G Annex B generation rules);
+ // no fabricated bytes emitted here.
+
+ // 步骤 2:Seq#01 IC2: <BPP> = MTD_GENERATE_BPP(tc_step)
+ // BPP synthesized (4.2.3.2.1 seq#1, structural layer, SCP03t-unprotected): 1067 bytes; segments: INIT=191B, A0=22B, A1=58B, A3=796B.
+ // Segment bytes are runtime-domain (BPP load step data=null per CaseIR unresolved); not injected into this script. Provenance:
+ // [SPEC] TC — SGP.23 4.2.3.2.1 seq#1 接线(段选择/注入面)
+ // [SPEC] BF36 — SGP.22 §2.5.4 :1566 BoundProfilePackage [54]
+ // [SPEC] BF36/A0 — Table 4 :1588 firstSequenceOf87
+ // [SPEC] BF36/A1 — Table 4 :1590 sequenceOf88
+ // [SPEC] BF36/A3 — Table 4 :1595 sequenceOf86
+ // [HYPOTHESIS] 87/88/86 段值 — UNPROTECTED:明文承载,SCP03t 包壳属后续 lane
+ // [SPEC] BF23 — SGP.22 §5.5.1 :7241 InitialiseSecureChannelRequest [35]
+ // [SPEC] BF23/82 remoteOpId — SGP.22 :1400 RemoteOpId [2] INTEGER
+ // [HYPOTHESIS] BF23/80 transactionId — SM-DP+ 会话值,Annex E 缺席,调用方注入
+ // [SPEC] BF23/A6 controlRefTemplate — SGP.22 :7255-7263 CRT 子集
+ // [SPEC] BF23/A6/80 keyType — SGP.22 :7257 AES='88'
+ // [SPEC] BF23/A6/81 keyLen — SGP.22 :7259 SHALL be 0x10
+ // [HYPOTHESIS] BF23/A6/84 hostId — Host ID 值,Annex E 缺席
+ // [HYPOTHESIS] BF23/5F49 smdpOtpk — otPK.DP.ECKA,需真实密钥协商 lane
+ // [HYPOTHESIS] BF23/5F37 smdpSign — SK.DPbp.ECDSA 签名,需签名 lane
+ // [HYPOTHESIS] BF23/82 remoteOpId — 注入 invalid_op_id:未定义 RemoteOpId(4.2.3.2.1 seq#01)
+ // [SPEC] BF24 — SGP.22 §5.5.2 :7319 ConfigureISDPRequest [36]
+ // [HYPOTHESIS] BF24/B8 dpProprietaryData — dpOid 与填充为 SM-DP+ 自有树自定值(Annex E 缺席);变体 nominal
+ // [SPEC] BF25 — SGP.22 §5.5.3 :7365 StoreMetadataRequest [37]
+ // [SPEC] BF25/5A iccid — SGP.22 :1398 Iccid [APPLICATION 26] tag '5A';值域 HYPOTHESIS(Annex E 缺席,需与 UPP EF-ICCID 一致)
+ // [HYPOTHESIS] BF25/91 serviceProviderName — Annex E 缺席
+ // [HYPOTHESIS] BF25/92 profileName — Annex E 缺席
+ // [SPEC] BF25/95 profileClass — SGP.22 :13218 ProfileClass INTEGER;取 operational(2)
+ // [SPEC] UPP — PITS ProfileElement 序列 header+mf+usim+end(最小集)
+ // [SPEC] PE header — PITS asn:26 ProfileElement header CHOICE [0]
+ // [SPEC] PE header/version — PITS asn:67-68 2/3
+ // [SPEC] PE header/profileType — PITS asn:942 Test Profile 值
+ // [HYPOTHESIS] PE header/iccid — eUICC 忽略此值(SGP.22 :7511);随参数化 ICCID
+ // [SPEC] PE header/services+GFSTE — PITS asn:946-958 子集转录
+ // [SPEC] PE mf — PITS asn:222 PE-MF + mfVal :961-1039
+ // [HYPOTHESIS] PE mf/ef-iccid — ICCID 参数化(EF 编码形态);其余模板值 SPEC
+ // [SPEC] PE usim — PITS asn:284 PE-USIM + usimValue :1166-1218
+ // [HYPOTHESIS] PE usim/ef-imsi — IMSI 参数化(mccMnc+MSIN);TBCD 编码面 3GPP 24.008 SPEC
+ // [SPEC] PE end — PITS asn:906 PE-End + endVal :2106 id=99
+
+ // 步骤 3:Seq#01 IC3: Split the <BPP> into several segments arrays named: <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1>, <BPP_SEG_A3>(tc_step)
+ // BPP segment declaration (no APDU face): <BPP_SEG_INIT>, <BPP_SEG_A0>, <BPP_SEG_A1>, <BPP_SEG_A3>.
+ // Segment partitioning lives in bpp_synthesizer.segment_bpp (SGP.22 §2.5.5 :1633-1651 segment table; single source of segmentation knowledge — wire sends BPP_SEG_INIT first).
+ // Segment bytes are runtime-domain (BPP synthesized at the MTD_GENERATE_BPP step); not injected into this script; load steps follow the SCRIPT data=null contract.
…(差异行超限,共 584 行,此处截断)
- man:
ESIM_TEST_SGP_23.UCE;入口 [('TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation', 'ES8(SMDP+ -- eUICC):InitialiseSecureChannel', 'Import\\\\ExecuteTestCase_SGP_23.js(TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation)')];参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"} - cas:
TC_eUICC_ES8_InitialiseSecureChannel/TC_eUICC_ES8_InitialiseSecureChannel.uce;入口 [('TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps', 'TC_eUICC_ES8_InitialiseSecureChannel', 'Import\\\\ExecuteTestCase_spec.js(TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps)')];参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}
5. L2 步骤/APDU/step_map 差异(结构化对齐)
- 命令计数:man 59 / cas 0;精确对齐 0,核心(CLA·INS·P1·P2·Lc)同 0,man-only 59,cas-only 0
| # | -man | -cas | 对齐 |
|---|---|---|---|
| — | man-only: @RESET, 80AA000007A9058100830137, 0070000000, 0070000001, 01A4040010A0000005591010FFFFFFFF8900000100, 01C0000021, 81E2910003BF2000, 01C00000A9, 81E2910003BF2E00, 01C0000015, 81E21100FFBF38820322304E80106B8902099F9C…355040A, 81E21101FF0C0752535054455354310B30090603…10BE530 |
6. L3 规范字段/Expected/REQ/通过条件差异
- spec:/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/spec_intl/SGP.23-v1.16_4.2.3_InitialiseSecureChannel.md(风格:mapping);caseir:
/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/caseir_materialized_gate.json
spec_intl 为人工核订映射表风格(规范步骤 ↔ 厂商脚本实现 ↔ 实跑结果):
| 规范步骤 | man 脚本实现 | man 实跑结果 |
|---|---|---|
| General IC 链(OP1 not loaded;选 ISD-R+鉴权+#PREP_DOWNLOAD_NO_CC 已发) | ResetCard()(L10)→ TS_TERMINAL_CAPABILITY_cmd()(L13)→ `TS_MANAGE_CH | 通过(复位 APDU4 起全链 APDU1-APDU113 绿;AuthenticateServer 后"卡片返回签名数据正确" APDU7 |
| IC1/IC2 生成 BPP(#INIT_SC_INVALID_OP_ID:remoteOpId=08) | isErrorTest=true(L44)+ remoteOpId="08"(L45,错误注入机器载体)+ `bppCommandI | 通过(INIT 段 Transport Command APDU114 BF36820982BF2381B0820108…——**82 |
| IC3 段切分(INIT/A0/A1/A3) | ES10b_LoadBoundProfilePackage()(L49,过程内部按错误注入提前终止于 INIT 段) | 通过(INIT 段链式 STORE DATA SW=9000 逐段在案,无 A0 后续——错误路径于 INIT 段即返回 PIR) |
| 1 BPP_SEG_INIT → #R_PIR_INVALID_OP_ID+euiccSignPIR 验签(RQ55_012 等) | 同上过程内部错误路径检查(RSP_Test_Procedure.js isErrorTest 分支:transactionId/smdpOi | 通过(SW 期望 9000=实际 9000(APDU117/118);PIR BF37 响应 APDU115;transactionId |
| (收尾,非规范步骤) | RecoverCard()(L54) | 通过(Transaction 2 APDU141-APDU260 MemoryReset 删 OP/TP+Reset default SM- |
cas CaseIR 步骤/检查:
| 步 | 动作 | checks | REQ |
|---|---|---|---|
| 1 | Seq#01 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 2 | Seq#01 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_OP_ID, #CONF_ISD | [] | [] |
| 3 | Seq#01 IC3: Split the <BPP> into several segments arrays named: <BPP_S | ["S3-C1"] | [] |
| 4 | Seq#01 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S4-C1", "S4-C2", "S4-C3", "S4-C4"] | ["RQ31_162", "RQ31_163", "RQ55_012", "RQ55_015", "RQ55_023", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 5 | Seq#02 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 6 | Seq#02 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_SIGN, #CONF_ISDP | [] | [] |
| 7 | Seq#02 IC3: Execute the step IC3 of the Test Sequence #01(切分为 <BPP_SEG | [] | [] |
| 8 | Seq#02 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S8-C1", "S8-C2", "S8-C3", "S8-C4"] | ["RQ31_162", "RQ31_163", "RQ55_011", "RQ55_015", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 9 | Seq#03 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 10 | Seq#03 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_TRANS_ID, #CONF_ | [] | [] |
| 11 | Seq#03 IC3: Execute the step IC3 of the Test Sequence #01(切分) | [] | [] |
| 12 | Seq#03 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S12-C1", "S12-C2", "S12-C3", "S12-C4"] | ["RQ31_162", "RQ31_163", "RQ55_013", "RQ55_015", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 13 | Seq#04 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 14 | Seq#04 IC2: <BPP> = MTD_GENERATE_BPP(#INIT_SC_INVALID_CRT, #CONF_ISDP_ | [] | [] |
| 15 | Seq#04 IC3: Execute the step IC3 of the Test Sequence #01(切分) | [] | [] |
| 16 | Seq#04 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>) | ["S16-C1", "S16-C2", "S16-C3"] | ["RQ31_162", "RQ31_163", "RQ55_014", "RQ55_015", "RQ55_019", "RQ25_024", "RQ25_025", "RQ25_026", "RQ35_003_1"] |
| 17 | Seq#05 IC1: Generate the <OTPK_S_SM_DP+_ECKA> and <OT_SK_S_SM_DP+_ECKA | [] | [] |
| 18 | Seq#05 IC2: <BPP> = MTD_GENERATE_BPP(#S_INIT_SC_PROF1, #CONF_ISDP_PROF | [] | [] |
| 19 | Seq#05 IC3: Execute the step IC3 of the Test Sequence #01(切分) | [] | [] |
| 20 | Seq#05 IC4: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>)(首次建立安全通道会话) | ["S20-C1"] | [] |
| 21 | Seq#05 IC5: MTD_STORE_DATA_SCRIPT(<BPP_SEG_A0>)(推进安装,保持安全通道会话进行中) | ["S21-C1"] | [] |
| 22 | Seq#05 1: MTD_STORE_DATA_SCRIPT(<BPP_SEG_INIT>)(安全通道会话进行中再次发起 Initiali | ["S22-C1", "S22-C2"] | ["RQ55_010", "RQ57_041_1", "RQ57_013", "RQ57_016"] |
6.1 充分性分析(启发式,不作最终裁定)
- cas:
GAPS_FOUND(全步有检查=True;REQ 全覆盖=False;ErrorCount==0=False) - cas 物化核对(启发式旁证,权威见下行 attestation):声明检查 20 项 / 生成体 checkData 15 次 / S 标号重合 11 / 计数缺口 5 / 形态
DEFICIT;执行面FAIL(计数缺口须结合绑定层隐含断言核验,非直接判缺陷) - cas 编译器自证(check_attestation,同批构建):声明 None = js 11 + binding 9 + gap 0;缺口判定以本行为权威(启发式计数仅旁证)
- binding 覆盖示例:
S3-C1→binding:bpp_split_per_annexB_segment_table(segment_bpp;SGP.22-2.;S4-C3→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime;S4-C4→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime;S8-C3→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime;S8-C4→binding:bpp_seg_load_pir_runtime_semantics(S22-2.5.6;PIR-runtime - cas 注释面登记检查(未以 checkData 物化、代码内有注释说明):['S12-C3', 'S12-C4', 'S16-C3', 'S22-C2', 'S3-C1', 'S4-C3', 'S4-C4', 'S8-C3', 'S8-C4']
- man:映射行 5;TTR 期望/实际回声 104;厂商工具内置审计(TTR 期望/实际回声行为证据);脚本字节级充分性不可完全外部验证
- cas 信息步(无线上断言义务):[1, 2, 5, 6, 7, 9, 10, 11, 13, 14, 15, 17, 18, 19]
- REQ 声明面 vs caseir 引用面差异(1 项,非等价缺口判定):['RQ31_162/RQ31_163--PIR 返回与 euiccSignPIR 签名)']
- caseir open_items:
- General IC 编排(初始化/选 ISD-R/相互认证/End User Confirmation/PrepareDownload)属执行侧前置,语料仅给锚点描述
- #INIT_SC_*、#CONF_ISDP_PROF1、#METADATA_OP_PROF1 常量字节不在输入包——BPP 与命令数据不可闭合;R2 已闭合 InitialiseSecureChannelRequest 外层结构(BF23/5F49/5F37 + CRT 静态段,S22_init_sc.md:51-73)
- <OTPK/OT_SK_S_SM_DP+_ECKA>、<S_ENC>/<S_MAC>/<S_INIT_MAC>、euiccSignPIR/证书均为执行期动态值
- 每序列执行后的 CU 清理过程属测试工具职责,语料未含
7. 分类结论(封闭枚举)
| 轴 | 计数 | 说明 |
|---|---|---|
RUN_DIFF | 1 | man 通过 / cas 失败 |
SCRIPT_DIALECT | 54 | 闭包文件差:man-only 3 / cas-only 51 |
GEN_DIFF | 60 | 命令序列差:man-only 59 / cas-only 0;REQ 覆盖缺口:['RQ31_162/RQ31_163--PIR 返回与 euiccSignPIR 签名)'] |
| 侧 | 根因候选(七类,启发式签名) | 签名 | |||
|---|---|---|---|---|---|
| cas | card_error | `Connect Reader 失败 | card is NOT connected | SW=0000 | SW=00000000` |
签名为文本面启发式命中(如 6D00 等 SW 亦可能是负例期望值),须结合 Expected 面核验后方可定论。
- 置信度:heuristic;需人工复核:False
8. 证据路径
- man 包:
../packages/man/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-man.zip - man TTR:
/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/logs/20260907_182247_ok/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES8_InitialiseSecureChannel_01_Error_Invalid_Remote_Operation.ttr - cas 包/源:
../packages/cas/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-cas.zip - cas TTR:
/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/logs/1627bd88_gapfix1/result/TC_eUICC_ES8_InitialiseSecureChannel/TC_eUICC_ES8_InitialiseSecureChannel_01_05_Error_steps.ttr - spec_intl:
/Users/yuhu/cas/原料/切片/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel/spec_intl/SGP.23-v1.16_4.2.3_InitialiseSecureChannel.md - caseir:
/Users/yuhu/cas/experiments/4.2.3.2.1-TC_eUICC_ES8+.InitialiseSecureChannel-20261004_021947/caseir_materialized_gate.json - step_map:
—