AES-GCM and random bytes

Create an AES key under Cryptography → AES. Each of the 16 identifiers has a name, enabled state and confirmation policy: every operation or once per card session. Lock, reset and USB mode changes end session authorisations.

The public AES-GCM APDU profile specifies SELECT, MSE and PSO encipher/decipher. It supports up to 3584 bytes of text and 256 bytes of AAD per operation. The device chooses and persists its nonce counter before use. A rejected authentication tag returns no plaintext. This is a versioned smart-card profile, not a claimed bulk-encryption interface.

GET CHALLENGE provides 1–32 random bytes through ISO 7816, with health checks and rate limits. Cryptography → Randomness shows health information and a local self-test. Different observed outputs are not an entropy certification.