# 4.2.18.2.8 TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases — `-man` ↔ `-cas` diff 报告 > **交付形态说明**：本报告随专家交付包分发——`-man`/`-cas` 脚本包 zip 与 190server HTML 执行日志已内联至 `packages/`、`evidence-html/`，相应路径已相对化；TTR、spec_intl、caseir 等仓内留痕仍为生成机原始路径（未随包）。 - 生成时间：2026-10-08 22:57:10 ｜引擎：holiday-blk5/0.1｜配对状态：`PAIRED` - 分母口径：卡侧 61 之一 ## 1. 配对与包 | 侧 | 包/源 | sha256 | 源类型 | 入口用例 | |---|---|---|---|---| | `-man` | 4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-man.zip | `42b7ec7b954d7889976a04c76c478f74baf73514780c4d095aa2c6a7c0beec6f` | zip | TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate | | `-cas` | 4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-cas.zip | `15a864dc1ca162c6540499972f3a546bce85a389620611ec2a1fb774d5180a79` | zip | — | - man 源路径：`../../packages/man/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-man.zip` - cas 源路径：`../../packages/cas/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-cas.zip` - 上游来源：{"man_ledger": true, "cas_ledger": true, "naming_map": true, "html_probe": true, "man_package": true, "cas_package": true} - 适用性：naming-map=`M` ["M", "M", "M", "M", "M"]；caseir=`M` ## 2. 执行摘要（双方 job/终态） | 侧 | 终态/计划 | 备注 | ErrorCount | job_id | 业务状态 | TTR | 诊断包 | |---|---|---|---|---|---|---|---| | `-man` | `ok` | `_ok` 复用（结构 A1-A7 PASS；`_ok` run 无厂商错误行） | 0 | `20260908_222123:fef7b21c90fd423882bea9624d202e5d` | — | `/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/logs/20260908_222939_ok/result/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.ttr` | `—` | | `-cas` | `failed` | 纯 native 零卡态前置（N0） | 37 | `30b510826dba481386c9343432026699` | — | `/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/logs/30b510826dba481386c9343432026699/result/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged.ttr` | `—` | - cas 块4账本：decision=`RERUN`；route=`native_N0`；live 事件 1 条（4.6 波次进行中；以块4终版账本为准） - cas 4.6 波次最新执行：terminal=`failed`；stage=`verify`；job=`30b510826dba481386c9343432026699`；gaps=["trace verdict=FAIL", "S20-SW: 期望 SW=9000，实际值 'dt20_not_executed:no_usable_material_set'（行 198）不符——证据矛盾", "结果通道 verdict='FAIL'"] - cas 失败归因引用（块4）：`b5-attribution.md` - cas 证据来源分层：`RERUN` → 本轮 4.6 波次执行 ## 3. HTML 执行日志状态 - `-man`：**NATIVE**（`../../evidence-html/4.2.18.2.8/man/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.html`；sha256 `490e6746ff75542e309146c8f9fad572f807f1cbca08406898636158ab17317d`；85974 bytes） - `-cas`：**NATIVE**（`../../evidence-html/4.2.18.2.8/cas/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged.html`；sha256 `79549dde78a12e7123c995e830747f477701d2b517add148feb2b9284f7c8d94`；45998 bytes） - 纪律：原生缺失 → `HTML_UNAVAILABLE` 显式阻断（附探针结论）；派生件仅标 `DERIVED_NOT_NATIVE`，不冒充原生。 ## 4. L1 脚本/依赖/命名差异（源文件闭包级） - 闭包规模：man 34 文件 / cas 82 文件；同名 31（字节同 30，内容异 1） - 同名内容异：`Import/TestCase_SGP_23.js` - man-only 文件 3：`ESIM_TEST_SGP_23.UCE`, `ESIM_TEST_SGP_23.sol`, `MANIFEST.json` - cas-only 文件 51：`Import/CapInfo.js`, `Import/ExecuteTestCase.js`, `Import/ExecuteTestCase_CSC.js`, `Import/ExecuteTestCase_LoadProfile_via_bip.js`, `Import/ExecuteTestCase_Local_Management.js`, `Import/ExecuteTestCase_Non_Telecom_Profile.js`, `Import/ExecuteTestCase_Performance.js`, `Import/ExecuteTestCase_PressureTest.js`, `Import/ExecuteTestCase_ProfileFormatTest_V_2_3_1.js`, `Import/ExecuteTestCase_ProfileServicesListTest.js` … - 注：man 包＝切片最小闭包（`script/` 投影）；cas 包＝slice_native 全工程投影（厂商参照闭包＋生成体）。闭包规模差为打包形态差异；同名文件字节差集中于 `Import/TestCase_SGP_23.js`（TC 入口本体）。 ### 4.1 入口代码对照 - 行数：man 241 / cas 724；字符：man 9150 / cas 73028 - man 顶层调用 Top：[["TestStepStart2", 42], ["TraceStart", 6], ["ResetCard", 6], ["TS_TERMINAL_CAPABILITY_cmd", 6], ["TS_MANAGE_CHANNEL_OPEN", 6], ["TS_SELECT", 6], ["RSP_profile_load_procedure_LPAd", 6], ["ES10b_GetEUICCInfo1", 6], ["ES10b_AuthenticateServer", 6], ["RecoverCard", 6]] - cas bind 调用：[["checkData", 116], ["sendApdu", 14], ["resetAndAtr", 1], ["runToSteadyState", 1], ["sendTerminalProfile", 1], ["manageChannelOpen", 1]] | 方言映射对 | 命中数 | |---|---| | ResetCard() ↔ bind.resetAndAtr() | 6 | | TS_*_cmd() ↔ bind.* 命令封装 | 18 |
unified diff（截断预览） ```diff --- man +++ cas @@ -1,240 +1,723 @@ -// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_02_Error_With_Invalid_SM_DS_Signature + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_03_Error_Unsupported_Curve + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_04_Error_eUICC_Challenge_Mismatch + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_05_Error_Unknown_CI_PK + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_06_Error_No_RSP_session_on_going (extracted verbatim) - -function TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate() -{ - - tracenamestr = "测试目的：执行AuthenticateServer指令，使用错误的SM-DSauth证书（如 签名无效）"; - curDis.TraceStart(sno++,tracenamestr); - - curDis.TestStepStart2(stno++,"复位；"); - ResetCard(); - - curDis.TestStepStart2(stno++,"读卡器向卡片发送Terminal Capability命令；"); - TS_TERMINAL_CAPABILITY_cmd(); - - curDis.TestStepStart2(stno++,"读卡器向卡片发送MANAGE_CHANNEL命令，打开辅助逻辑通道；"); - TS_MANAGE_CHANNEL_OPEN(); - - curLogicChannel = 1; - - curDis.TestStepStart2(stno++,"读卡器向卡片发送SELECT命令，选择ISD-R；"); - TS_SELECT("Select ISD",ISD_R_AID,"9000"); - - curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccInfo1Request；"); - pkId_CI_ForVerification = pkId_CI_ECDSA_BRP; - pkId_CI_ForSigning = pkId_CI_ECDSA_BRP; - var Profile_load_procedure = new RSP_profile_load_procedure_LPAd(PROFILE_OPERATIONAL1_DATA); - Profile_load_procedure.ICCID = ICCID_OP_PROF1; - Profile_load_procedure.ES10b_GetEUICCInfo1(); - - curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccChallengeRequest；"); - Profile_load_procedure.ES10b_GetEUICCChallenge(); - - - - curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行AuthenticateServerRequest；"); - Profile_load_procedure.isErrorTest = true; - euiccAuthenticateErrorCode = AuthenticateErrorCode.invalidCertificate; - Profile_load_procedure.DPauthInforObj.Cert = CERT_S_SM_DSauth_INV_SIGN_BRP; - Profile_load_procedure.ES10b_AuthenticateServer(); - - RecoverCard(); +// Author: 卡思Cas智能体 +// Date: 20261004-021953 +// Function: （purpose 原文未由 SGP.23 该 TC 提供，corpus vacuum 登记）TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases，Test Sequence #01-#06 Error（本 TC 全部 6 条 Test Sequence 合并展开），适用性 M。 +// Test points: ICH-IC1-K1-C1 ATR_present；ICH-IC1-K2-C2 FCP_Template；ICH-IC1-K2-C4 SW +// ICH-IC1-K3-C4 SW；ICH-IC1-K4-C4 final SW；ICH-IC2-K1-C4 SW；ICH-IC2-K1-C3 CHANNEL_NUMBER extracted +// ICH-IC2-K2-C4 SW；S1-C1 SW；S1-C2 R_EUICC_INFO1 outer tag +// S1-C2 R_EUICC_INFO1 required members present；S2-C1 SW；S2-C2 R_CHALLENGE outer tag +// S2-C2 R_CHALLENGE required members present；S2-C2 tagOfeuiccChallenge +// S2-C2 lengthOfeuiccChallenge；S4-C1 SW；S4-C2 structure_error；S4-C3 transactionId echo +// S4-C2 R_AUTH_SERVER_INV_CERT authenticateResponseError structure +// S4-C2 authenticateErrorCode invalidCertificate；S5-C1 SW；S5-C2 R_EUICC_INFO1 outer tag +// S5-C2 R_EUICC_INFO1 required members present；S6-C1 SW；S6-C2 R_CHALLENGE outer tag +// S6-C2 R_CHALLENGE required members present；S6-C2 tagOfeuiccChallenge +// S6-C2 lengthOfeuiccChallenge；S8-C1 SW；S8-C2 structure_error；S8-C3 transactionId echo +// S8-C2 R_AUTH_SERVER_INV_SIGN authenticateResponseError structure +// S8-C2 authenticateErrorCode invalidSignature；S9-C1 SW；S9-C2 R_EUICC_INFO1 outer tag +// S9-C2 R_EUICC_INFO1 required members present；S10-C1 SW；S10-C2 R_CHALLENGE outer tag +// S10-C2 R_CHALLENGE required members present；S10-C2 tagOfeuiccChallenge +// S10-C2 lengthOfeuiccChallenge；S12-C1 SW；S12-C2 structure_error；S12-C3 transactionId echo +// S12-C2 R_AUTH_SERVER_INV_CURV authenticateResponseError structure +// S12-C2 authenticateErrorCode unsupportedCurve；S13-C1 SW；S13-C2 R_EUICC_INFO1 outer tag +// S13-C2 R_EUICC_INFO1 required members present；S14-C1 SW；S14-C2 R_CHALLENGE outer tag +// S14-C2 R_CHALLENGE required members present；S14-C2 tagOfeuiccChallenge +// S14-C2 lengthOfeuiccChallenge；S16-C1 SW；S16-C2 structure_error；S16-C3 transactionId echo +// S16-C2 R_AUTH_SERVER_INV_CHALLENGE authenticateResponseError structure +// S16-C2 authenticateErrorCode euiccChallengeMismatch；S17-C1 SW；S17-C2 R_EUICC_INFO1 outer tag +// S17-C2 R_EUICC_INFO1 required members present；S18-C1 SW；S18-C2 R_CHALLENGE outer tag +// S18-C2 R_CHALLENGE required members present；S18-C2 tagOfeuiccChallenge +// S18-C2 lengthOfeuiccChallenge；S20-C1 SW；S20-C2 structure_error；S20-C3 transactionId echo +// S20-C2 R_AUTH_SERVER_INV_CI authenticateResponseError structure +// S20-C2 authenticateErrorCode ciPKUnknown；S21-C1 SW；S21-C2 R_EUICC_INFO1 outer tag +// S21-C2 R_EUICC_INFO1 required members present；S23-C1 SW；S23-C2 structure_error +// S23-C3 tid_unchecked；S23-C2 R_AUTH_SERVER_NO_SESSION authenticateResponseError structure +// S23-C2 authenticateErrorCode noSessionContext +// S23-C3 error transactionId present (any value accepted) +// 本函数由 CaseIR 4.2.18.2.8 编译生成（4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953，SGP.23 v1.16 × SGP.22 v2.7）：字节权威=CaseIR，非誊录黄金脚本。 +// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md). +// 适用性 M：编译期门，运行时由 harness 环境前置承担。 +function TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged() { + var bind = curBind; + // Seq#06 附加 （卡态）No RSP session is on-going（未调用 ES10b.GetEUICCChallenge）: declared unexpanded (non-PROC row or K corpus vacuum; see CaseIR open_items). + + // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 1)：RESET（K 语料机械展开） + var s24 = bind.resetAndAtr(); + bind.checkData("ICH-IC1-K1-C1 ATR_present", "1", s24.atr_hex !== "" ? "1" : "0"); + + // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 2)：SELECT_MF（K 语料机械展开） + // FCP outer tag not materialized from clause: tag-face asserted only when corpus fixes the tag byte (e.g. TS 102 221 FCP '62'). + var s25 = bind.sendApdu("00", "A4", "00", "04", "3F00", "00", "9000"); + bind.checkData("ICH-IC1-K2-C2 FCP_Template", "1", s25.resp.length > 0 ? "1" : "0"); + bind.checkData("ICH-IC1-K2-C4 SW", "9000", s25.sw); + + // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 3)：TERMINAL_CAPABILITY_LPAd（K 语料机械展开） + var s26 = bind.sendApdu("80", "AA", "00", "00", "A9058100830107", null, "9000"); + bind.checkData("ICH-IC1-K3-C4 SW", "9000", s26.sw); + + // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 4)：TERMINAL_PROFILE（K 语料机械展开） + var steady27 = bind.runToSteadyState(function () { + return bind.sendTerminalProfile("FFFFFFFF7F9D00DFBF00001FE2000000C7EB0000000168005000000000000200", "9000"); + }); + bind.checkData("ICH-IC1-K4-C4 final SW", "9000", steady27.final.sw); + + // IC head inline (initial_conditions → PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR, K row 1)：MANAGE_CHANNEL_OPEN（K 语料机械展开） + // CHANNEL_NUMBER extraction and dynamic CLA rebinding are CasBind internal state (chaining rule; no generated-code re-implementation). + var s28 = bind.manageChannelOpen("9000"); + bind.checkData("ICH-IC2-K1-C4 SW", "9000", s28.sw); + bind.checkData("ICH-IC2-K1-C3 CHANNEL_NUMBER extracted", "1", s28.chan !== null ? "1" : "0"); + + // IC head inline (initial_conditions → PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR, K row 2)：MTD_SELECT（K 语料机械展开） + // CLA = bound channel (cla_rule) and length binding are CasBind internal state (chaining rule; no generated-code re-implementation). + var s29 = bind.sendApdu(null, "A4", "04", "00", "A0000005591010FFFFFFFF8900000100", null, "9000"); + // MTD_SELECT expected face is SW-only (K Annex C.2 open-channel procedure step 2: no FCI content assertion in corpus); no fabricated template parse. + bind.checkData("ICH-IC2-K2-C4 SW", "9000", s29.sw); + + // 步骤 1：Seq#01] MTD_STORE_DATA（tc_step） + // length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule). …（差异行超限，共 965 行，此处截断） ```
### 4.2 UCE/命名对照 - man：`ESIM_TEST_SGP_23.UCE`；入口 [('TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate', 'TC_EUICC_ES10B.AuthenticateServer_SM-DS_ErrorCases', 'Import\\\\ExecuteTestCase_SGP_23.js(TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"} - cas：`TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases.uce`；入口 [('TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged', 'TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases', 'Import\\\\ExecuteTestCase_spec.js(TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"} ## 5. L2 步骤/APDU/step_map 差异（结构化对齐） - 命令计数：man 40 / cas 57；精确对齐 5，核心（CLA·INS·P1·P2·Lc）同 8，man-only 27，cas-only 44 | # | `-man` | `-cas` | 对齐 | |---|---|---|---| | 1 | `@RESET` | `@RESET` | exact | | 2 | `80AA000007A9058100830137` | `80AA000007A9058100830107` | core_same | | 3 | `0070000001` | `0070000001` | exact | | 4 | `01A4040010A0000005591010FFFFFFFF8900000100` | `01A4040010A0000005591010FFFFFFFF8900000100` | exact | | 5 | `01C0000021` | `01C0000021` | exact | | 6 | `81E2910003BF2000` | `81E2910003BF200000` | core_same | | 7 | `81E2910003BF2E00` | `81E2910003BF2E0000` | core_same | | 8 | `01C000001A` | `01C000001A` | exact | | 9 | `81E2910003BF2000` | `81E2910003BF200000` | core_same | | 10 | `81E2910003BF2D00` | `81E2910003BF2E0000` | core_same | | 11 | `81E2910003BF2800` | `81E2910003BF200000` | core_same | | 12 | `81E2910003BF2800` | `81E2910003BF2E0000` | core_same | | 13 | `81E2910003BF2B00` | `81E2910003BF200000` | core_same | | — | man-only: `0070000000`, `01C00000A9`, `01C0000015`, `81E21100FFBF388202F13049801050DC63CEECF3…C075253`, `81E21101FF5054455354310B3009060355040613…8AE0108`, `81E29102F8F01DEF548ED9859714DD48300E0603…3000010`, `@RESET`, `00A40004023F00`, `00C0000020`, `80AA000007A9058100830137`, `8010000023FFFFFFFF7F9D00DFBF00001FE20000…0000038`, `801200000F` | | | | — | | cas-only: `00A40004023F0000`, `00C0000020`, `8010000020FFFFFFFF7F9D00DFBF00001FE20000…0000200`, `801200000F`, `801400000C810301250082028281830100`, `81C00000A9`, `81C0000015`, `01E21100FFBF3882032F3051801077859B7E9A02…40A0C00`, `01E21101FF0752535054455354310B3009060355…B258A00`, `01E21102FFFB61388B3FF2EE6A61E2C44D72300E…7452D00`, `01E29103375438373739A130800400000000A128…2010000`, `81C00000A9` | | | ## 6. L3 规范字段/Expected/REQ/通过条件差异 - spec：/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/spec_intl/SGP.23-v1.16_4.2.18_AuthenticateServer_SM-DS_ErrorCases.md（风格：mapping）；caseir：`/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/caseir_materialized_gate.json` spec_intl 为人工核订映射表风格（规范步骤 ↔ 厂商脚本实现 ↔ 实跑结果）： | 规范步骤 | man 脚本实现 | man 实跑结果 | |---|---|---| | IC1 PROC_EUICC_INITIALIZATION_SEQUENCE | `ResetCard()`（L10）→ `TS_TERMINAL_CAPABILITY_cmd()`（L13） | 通过（步骤 1-2＝APDU3/6，复位成功＋ATR 3B9D96… 在案（APDU4/5），TC SW=9000） | | IC2 PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR | `TS_MANAGE_CHANNEL_OPEN()`（L16）→ `TS_SELECT("Select ISD",ISD_R_AID,"90 | 通过（步骤 3-4＝APDU11/17，通道 01＋ISD-R 9000，FCI 含 8203020500＝RSP V2.5（APDU19） | | 1 #GET_EUICC_INFO1 | BRP CI 注入 `pkId_CI_ForVerification/ForSigning=pkId_CI_ECDSA_BRP`（L24-2 | 通过（步骤 5＝APDU23，R_EUICC_INFO1 SW=9000；euiccCiPKIdListForVerification=[F | | 2 #GET_EUICC_CHALLENGE | `ES10b_GetEUICCChallenge()`（L31） | 通过（步骤 6＝APDU29，R_CHALLENGE SW=9000，挑战 0001…0E0F（APDU31）） | | 3 组装：#CERT_S_SM_DSauth_INV_SIGN（同根 CI、签名无效） | `isErrorTest=true`（L36）＋`euiccAuthenticateErrorCode=invalidCertificate | 通过（缺陷证书随请求 BF388202F1 下发（APDU37-55），载荷含 CN="TEST SM-DS" INV_SIGN 证书体） | | 4 `MTD_STORE_DATA_SCRIPT(#AUTH_SMDS_INV_CERT)` → #R_AUTH_SERVER_INV_CERT＋SW=0x9000 | `ES10b_AuthenticateServer()`（L39） | 通过（步骤 7＝APDU35 起；响应 **`BF3817 A1 15`＝authenticateResponseError**（APDU5 | | 4 断言：AuthenticateResponseError 中 S_TRANSACTION_ID 与请求相同 | 过程库错误分支解析＋raw 字节比对 | 通过（**字节级**：请求 `8010 50DC63CEECF3CE770904D3C2A4AAE196`（APDU37/41）↔ 错误响应 | | 4 断言：错误码语义（规范表 202 未锁值；SGP.22 L9094 枚举 invalidCertificate=1） | `AuthenticateErrorCode 检查`（过程库） | 通过（**期望值: 01=实际值: 01**（APDU61/62）＝invalidCertificate(1)，与注入载体 INV_SIGN | | （收尾，非规范步骤） | `RecoverCard()`（L41） | 通过（Transaction 2 APDU63-168：复位→MemoryReset→profile 列表归空→通知面 BF28/BF2B | cas CaseIR 步骤/检查： | 步 | 动作 | checks | REQ | |---|---|---|---| | 1 | [Seq#01] MTD_STORE_DATA (#GET_EUICC_INFO1) | ["S1-C1", "S1-C2"] | [] | | 2 | [Seq#01] MTD_STORE_DATA (#GET_EUICC_CHALLENGE) | ["S2-C1", "S2-C2"] | [] | | 3 | [Seq#01] Step4 输入准备（InitiateAuthentication）：设 不以 #SK | [] | [] | | 8 | [Seq#02] MTD_STORE_DATA_SCRIPT (#AUTHENTICATE_SMDS) | ["S8-C1", "S8-C2", "S8-C3"] | ["RQ57_100", "RQ31_052", "RQ57_097", "RQ57_105", "RQ57_107", "RQ31_049", "RQ26_010"] | | 9 | [Seq#03] MTD_STORE_DATA (#GET_EUICC_INFO1) | ["S9-C1", "S9-C2"] | [] | | 10 | [Seq#03] MTD_STORE_DATA (#GET_EUICC_CHALLENGE) | ["S10-C1", "S10-C2"] | [] | | 11 | [Seq#03] Step4 输入准备（InitiateAuthentication）：serverSignature1 用 、#S_EUICC_CHALLENGE、//服务器 challenge/签名 为 G_annexB 运行时动态值，serverCertificate 字节在 SGP.26 捆绑不在输入包，DeviceInfo 内层标签与 SubjectKeyIdentifier/Certificate 编码标签语料缺席（保守占位），各 长度随动态值定，分块 P1/P2 逐块值运行时定 - CtxParams1 CHOICE 备选项按语料（S22_auth_srv :71）无显式标签 → 承载 SEQUENCE 标签 30 编码；若 SGP.22 原文该备选带显式标签则为语料漂移点，回原件裁定 - 【B-5 闭合登记 2026-10-04】CtxParams1 30→A0 与 matchingId 0C→80 漂移已按上条裁定修复（RSPDefinitions AUTOMATIC TAGS + 黄金切片线缆 + vendor RSP_Obj tag 表三源对账）；多占位模板经 dynamic_templates/dynamic_template 声明面机械闭合（fail-closed 合同，未声明占位仍拒编）；F S_DEVICE_INFO_IMEI 的 '01000'H 五奇尼 typo 按 010000（3B VersionType）读（vendor TestStep.js:266 实证）。 ## 7. 分类结论（封闭枚举） | 轴 | 计数 | 说明 | |---|---|---| | `RUN_DIFF` | 1 | man 通过 / cas 失败 | | `SCRIPT_DIALECT` | 125 | 闭包文件差：man-only 3 / cas-only 51；命令序列差：man-only 27 / cas-only 44 | | `GEN_DIFF` | 9 | REQ 覆盖缺口：['RQ26_005/006/007/008/010/012/013/029/033/034/035', 'RQ31_025/046-055/076-079', 'RQ36_017', 'RQ42_001', 'RQ43_001/002', 'RQ45_002/006/026/026_1/028/030/032', 'RQ55_004/005', 'RQ57_093-108）', '§4.2.18.1 全集'] | - 置信度：heuristic；需人工复核：False ## 8. 证据路径 - man 包：`../../packages/man/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-man.zip` - man TTR：`/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/logs/20260908_222939_ok/result/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.ttr` - cas 包/源：`../../packages/cas/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-cas.zip` - cas TTR：`/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/logs/30b510826dba481386c9343432026699/result/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged.ttr` - spec_intl：`/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/spec_intl/SGP.23-v1.16_4.2.18_AuthenticateServer_SM-DS_ErrorCases.md` - caseir：`/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/caseir_materialized_gate.json` - step_map：`—`