package com.dangerousthings.aliro;

/**
 * CSA Aliro v1.0 AIDs, spec &sect;10.2.1.
 */
public final class AliroAids {
    /** Expedited Phase AID: A0 00 00 09 09 AC CE 55 01 */
    public static final byte[] EXPEDITED = {
        (byte)0xA0, (byte)0x00, (byte)0x00, (byte)0x09, (byte)0x09,
        (byte)0xAC, (byte)0xCE, (byte)0x55, (byte)0x01
    };

    /** Step-up Phase AID: A0 00 00 09 09 AC CE 55 02 */
    public static final byte[] STEP_UP = {
        (byte)0xA0, (byte)0x00, (byte)0x00, (byte)0x09, (byte)0x09,
        (byte)0xAC, (byte)0xCE, (byte)0x55, (byte)0x02
    };

    /**
     * DT-internal provisioning AID. Lives under the CSA RID so this applet
     * can ship in the same CAP as the spec-defined Aliro applets (Java Card
     * requires all applets in a package share the package's RID). The PIX
     * tail (ACCE 55 99 01) is non-spec — Aliro v1 uses 0x01/0x02 as the
     * PIX-low byte; 0x99 stays clear of any future allocation.
     *
     * <p>Used by the PersonalizationApplet to receive Access Credential +
     * reader keys + Access Document before the main Aliro flow runs. The
     * applet locks itself after COMMIT.
     */
    public static final byte[] PROVISIONING = {
        (byte)0xA0, (byte)0x00, (byte)0x00, (byte)0x09, (byte)0x09,
        (byte)0xAC, (byte)0xCE, (byte)0x55, (byte)0x99, (byte)0x01
    };

    private AliroAids() {}
}
