A mobile device communicating with a wireless network, the mobile device comprising: a memory configured to store an embedded universal integrated circuit card, eUICC, identity; a random number generator configured to generate a random number for an eUICC private key corresponding to an eUICC public key; a radio configured to: a. transmit, to a subscription manager, the eUICC identity and the eUICC public key; and b. receive, from the subscription manager, i) an eUICC profile comprising network parameters, a key K, and a subscriber identity and ii) a symmetric key; and an eUICC associated with the eUICC identity and configured to: a. derive a profile key using an elliptic curve Diffie Hellman (ECDH) key exchange with the eUICC private key and a subscription manager public key; b. decrypt a first portion of the eUICC profile using the profile key; c. receive the symmetric key from a network application operating in the mobile device; d. decrypt a second portion of the eUICC profile using the symmetric key, wherein the second portion includes the key K and the subscriber identity, and wherein the first portion and the second portion are distinct; and e. generate a response value for authentication of the mobile device using the key K. a memory configured to store an embedded universal integrated circuit card, eUICC, identity; a random number generator configured to generate a random number for an eUICC private key corresponding to an eUICC public key; a radio configured to: a. transmit, to a subscription manager, the eUICC identity and the eUICC public key; and b. receive, from the subscription manager, i) an eUICC profile comprising network parameters, a key K, and a subscriber identity and ii) a symmetric key; and a. transmit, to a subscription manager, the eUICC identity and the eUICC public key; and b. receive, from the subscription manager, i) an eUICC profile comprising network parameters, a key K, and a subscriber identity and ii) a symmetric key; and an eUICC associated with the eUICC identity and configured to: a. derive a profile key using an elliptic curve Diffie Hellman (ECDH) key exchange with the eUICC private key and a subscription manager public key; b. decrypt a first portion of the eUICC profile using the profile key; c. receive the symmetric key from a network application operating in the mobile device; d. decrypt a second portion of the eUICC profile using the symmetric key, wherein the second portion includes the key K and the subscriber identity, and wherein the first portion and the second portion are distinct; and e. generate a response value for authentication of the mobile device using the key K. a. derive a profile key using an elliptic curve Diffie Hellman (ECDH) key exchange with the eUICC private key and a subscription manager public key; b. decrypt a first portion of the eUICC profile using the profile key; c. receive the symmetric key from a network application operating in the mobile device; d. decrypt a second portion of the eUICC profile using the symmetric key, wherein the second portion includes the key K and the subscriber identity, and wherein the first portion and the second portion are distinct; and e. generate a response value for authentication of the mobile device using the key K.