A mobile device communicating with a wireless network , the mobile device comprising: a memory configured to store an embedded universal integrated circuit card, eUICC, identity ; a random number generator configured to generate a random number for an eUICC private key corresponding to an eUICC public key ; a radio configured to: a. transmit, to a subscription manager , the eUICC identity and the eUICC public key ; and b. receive, from the subscription manager , i) an eUICC profile comprising network parameters , a key K , and a subscriber identity and ii) a symmetric key ; and an eUICC associated with the eUICC identity and configured to: a. derive a profile key using an elliptic curve Diffie Hellman (ECDH) key exchange with the eUICC private key and a subscription manager public key ; b. decrypt a first portion of the eUICC profile using the profile key ; c. receive the symmetric key from a network application operating in the mobile device ; d. decrypt a second portion of the eUICC profile using the symmetric key , wherein the second portion includes the key K and the subscriber identity , and wherein the first portion and the second portion are distinct; and e. generate a response value for authentication of the mobile device using the key K . a memory configured to store an embedded universal integrated circuit card, eUICC, identity ; a random number generator configured to generate a random number for an eUICC private key corresponding to an eUICC public key ; a radio configured to: a. transmit, to a subscription manager , the eUICC identity and the eUICC public key ; and b. receive, from the subscription manager , i) an eUICC profile comprising network parameters , a key K , and a subscriber identity and ii) a symmetric key ; and a. transmit, to a subscription manager , the eUICC identity and the eUICC public key ; and b. receive, from the subscription manager , i) an eUICC profile comprising network parameters , a key K , and a subscriber identity and ii) a symmetric key ; and an eUICC associated with the eUICC identity and configured to: a. derive a profile key using an elliptic curve Diffie Hellman (ECDH) key exchange with the eUICC private key and a subscription manager public key ; b. decrypt a first portion of the eUICC profile using the profile key ; c. receive the symmetric key from a network application operating in the mobile device ; d. decrypt a second portion of the eUICC profile using the symmetric key , wherein the second portion includes the key K and the subscriber identity , and wherein the first portion and the second portion are distinct; and e. generate a response value for authentication of the mobile device using the key K . a. derive a profile key using an elliptic curve Diffie Hellman (ECDH) key exchange with the eUICC private key and a subscription manager public key ; b. decrypt a first portion of the eUICC profile using the profile key ; c. receive the symmetric key from a network application operating in the mobile device ; d. decrypt a second portion of the eUICC profile using the symmetric key , wherein the second portion includes the key K and the subscriber identity , and wherein the first portion and the second portion are distinct; and e. generate a response value for authentication of the mobile device using the key K . <EOS>