Need two atoms for Key History

[bob-fontana]

This container is optional, but if present, the 85B tool will rest it. It appears to be in scope.

From 85B:

Step 4: Read and parse the byte array in accordance with BER-TLV format.

If keysWithOnCardCerts = 0 and keysWithOffCardCerts > 0
  Read the certificate(s) and key references (pairs) from the vendor provided URL file. 
  For each key reference value in the range (0x95 – keysWithOffCardCerts + 1) through 0x95, 
    verify that the provided URL file includes that key reference, issue a challenge for that key
    reference and verify the response using the public key from the corresponding certificate from the provided URL file.

If keysWithOnCardCerts > 0 and keyWithOffCardCerts = 0
  For each key reference value in the range 0x82 through (0x82 + keysWithOnCardCerts – 1), 
    read the certificates from the card. Issue a challenge and verify response for each retired private key.

If keysWithOnCardCerts > 0 and keyWithOffCardCerts > 0
  For each key reference value in the range 0x82 through (0x82 + keysWithOnCardCerts – 1) and in the range (0x95 – keysWithOffCardCerts + 1) through 0x95
    verify that the provided URL file includes that key reference, issue a challenge for that key reference, and verify the response using the public key from the corresponding certificate from the provided URL file.

• 8.14.1: All mandatory tags in “Key History Object” table are present.
• 8.14.2: And the values associated with keysWithOnCardCerts > 0 and keyWithOffCardCerts are consistent with the data on the card based on the details in step 4.