Is the CVM list signed on the IC?
Is it possible, in theory, for one to acquire a USB smart card reader/writer and use it to write a new CVM list to an EMV card? I suspect adding a new CVM, like offline PIN, to a card that does not already support it, would be tricky, but unless the CVM list is digitally signed, would it be that hard to reorder the CVM list already on the card, and then write it onto the chip?