Three components, all bench-validated to varying depths: - applet/: CSA Aliro v1.0 Java Card applet for J3R180. AUTH0 + AUTH1 expedited-standard flow end-to-end green via PC/SC bench reader (aliro-bench-test). Userland AES-256-GCM and HMAC-SHA-256 layered on top of J3R180's primitives because the card lacks both natively. P-256 curve params seeded explicitly per J3R180's quirk. - harness/: Python orchestrator (aliro-trustgen, aliro-personalize, aliro-bench-test) for trust-bundle generation, card personalization via PersonalizationApplet, and PC/SC AUTH0+AUTH1 transactions. 126 pytest cases passing. - reader/STM32CubeExpansion_ALIRO_V1_0_0/: ST X-CUBE-ALIRO V1.0.0 with our NFC10A1 port (NUCLEO-U545RE-Q + X-NUCLEO-NFC10A1, ST25R200 shared with NFC09A1). nfc10-only/ project, NFC10A1 BSP shim, ALIRO_TRUST_OVERRIDE include into vendor's provisioning.c, and an ALIRO_APDU_TRACE wrapper around demoTransceiveBlocking. Boots, detects the J3R180, completes SELECT + AUTH0; AUTH1 currently fails with RFAL ERR_PROTO (0xB) — under investigation, see docs/plans/2026-04-20-nucleo-nfc10a1-port.md and bench-notes/. Excluded: x-cube-aliro.zip vendor archive, harness/.venv, build dirs, generated aliro_trust.h (contains private reader scalar), all PEMs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
406 lines
11 KiB
Plaintext
406 lines
11 KiB
Plaintext
|
||
-------------End of NFC demoAPDU ---------
|
||
NFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A 80
|
||
[0;39m[0;31m
|
||
DOOR OPERATION FAILED
|
||
[0;39mAliroPort_TRANSACTION_FAILURE
|
||
ACWG_prepareEphemeralKeypairAndTransactionId()
|
||
retval=ACWG_OK
|
||
|
||
-------------End of NFC demoAPDU ---------
|
||
NFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A 80
|
||
[0;39m[0;31m
|
||
DOOR OPERATION FAILED
|
||
[0;39mAliroPort_TRANSACTION_FAILURE
|
||
ACWG_prepareEphemeralKeypairAndTransactionId()
|
||
retval=ACWG_OK
|
||
|
||
-------------End of NFC demoAPDU ---------
|
||
NFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A 80
|
||
[0;39m[0;31m
|
||
DOOR OPERATION FAILED
|
||
[0;39mAliroPort_TRANSACTION_FAILURE
|
||
ACWG_prepareEphemeralKeypairAndTransactionId()
|
||
retval=ACWG_OK
|
||
|
||
-------------End of NFC demoAPDU ---------
|
||
NFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A
|
||
|
||
-------------End of NFC demoAPDU ---------
|
||
NFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A 80
|
||
[0;39m[0;31m
|
||
DOOR OPERATION FAILED
|
||
[0;39mAliroPort_TRANSACTION_FAILURE
|
||
ACWG_prepareEphemeralKeypairAndTransactionId()
|
||
retval=ACWG_OK
|
||
|
||
-------------End of NFC demoAPDU ---------
|
||
Received char ?
|
||
[0;36m
|
||
|
||
********************** STATUS ***********************
|
||
[0;39m[0;33m Key Slot: [0;39mnot active
|
||
[0;33m Transaction: [0;39mSTANDARD
|
||
[0;33m Exchange: [0;39mauto - based on signaling bitmap
|
||
[0;33m Stepup: [0;39mauto - based on signaling bitmap
|
||
[0;33m Load Cert: [0;39mcertificate not available
|
||
[0;33m Not Verify Key: [0;39mnot active
|
||
[0;33m Authentication Policy: [0;39mUser device setting
|
||
[0;33m Vendor Specific Extension: [0;39mnot active
|
||
Protocol version: 0x0100
|
||
NFC FLOW: ENABLED
|
||
BLE FLOW: ENABLED
|
||
BLE-RKE FLOW: ENABLED
|
||
BLE-UWB FLOW: ENABLED
|
||
Access element is set to: matter1
|
||
[0;36m*****************************************************
|
||
[0;39m[0;33mPROVISIONING_JSON_START_ADDRESS: [0;39m0x0807C000
|
||
[0;33mPROVISIONING_START_ADDRESS: [0;39m0x0807E000
|
||
verbosity level set to: 5[0;36m
|
||
********************* COMMANDS **********************
|
||
[0;39m 0-6 Set verbosity level
|
||
? - System status and commands list
|
||
a - Set Authentication Policy
|
||
b - Toggle Vendor Specific Extension
|
||
f - Toggle Fast transaction
|
||
k - Toggle Key Slot activation
|
||
e - Toggle EXCHANGE
|
||
l - Set LOAD_CERT
|
||
u - Toggle STEPUP
|
||
v - Toggle Not Verify Key
|
||
d - Ranging Suspend/Resume Action (not active work in progress)
|
||
p - Provisioning status
|
||
s - Save default provisioning info
|
||
c - Convert provisioning info from json
|
||
w - NFC wakeup mode (LPCD)
|
||
n - Switch NFC only / NFC+BLE / NFC+BLE+UWB
|
||
z - Save last access credential PuBK
|
||
'date:' - Set system date
|
||
'time:' - Set system time
|
||
'settime-' - Set system date and time
|
||
'setRDiden-' - Set reader group identifier and sub identifier
|
||
'setRDprvk-' - Set reader private key
|
||
'setRDpubk-' - Set reader public key
|
||
'setRDgrrk-' - Set reader group resolving key
|
||
'setCrIspk-' - Set Credential issuer public key
|
||
'setDEVpbk-' - Set reader access credential public key
|
||
'setAccElm-' - Set access element name for stepup (session)
|
||
r - system restart
|
||
! - system pause
|
||
[0;36m*****************************************************
|
||
[0;39mNFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A 80
|
||
[0;39m[0;31m
|
||
DOOR OPERATION FAILED
|
||
[0;39mAliroPort_TRANSACTION_FAILURE
|
||
ACWG_prepareEphemeralKeypairAndTransactionId()
|
||
retval=ACWG_OK
|
||
|
||
-------------End of NFC demoAPDU ---------
|
||
NFCA Passive ISO-DEP device found. UID: 0489255AF21890
|
||
ACWG_initSessionContext()
|
||
retval=ACWG_OK
|
||
|
||
[0;32m
|
||
**************************************
|
||
-- SELECT --
|
||
[0;39mReturned 25 bytes
|
||
Two last values are: 90 00
|
||
|
||
Supported protocol version: 0x0100
|
||
[0;32mOK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH0 --
|
||
[0;39m-- USING Endpoint PubKey --
|
||
-- STD TRANSACTION REQUESTED --
|
||
ACWG_generateAUTH0CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH0CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH0 DATA
|
||
|
||
[0;32mSending AUTH0 APDU
|
||
[0;39mReturned 69 bytes
|
||
Two last values are: 90 00
|
||
ACWG_processAUTH0ResponsePayload()
|
||
retval=ACWG_OK
|
||
ACWG_processAUTH0ResponsePayload()[0;32m - OK
|
||
[0;39m
|
||
[0;32m
|
||
**************************************
|
||
-- AUTH1 --
|
||
[0;39mACWG_generateAUTH1CommandPayload()
|
||
retval=ACWG_OK
|
||
ACWG_generateAUTH1CommandPayload()[0;32m - OK
|
||
[0;39m
|
||
Generate AUTH1 DATA
|
||
|
||
[0;32mSending AUTH1 APDU
|
||
[0;39mReturned 2 bytes
|
||
Two last values are: 6a 80
|
||
[0;31mError code: 6A 80
|
||
[0;39m[0;31m
|
||
DOOR OPERATION FAILED
|
||
[0;39mAliroPort_TRANSACTION_FAILURE
|
||
ACWG_prepareEphemeralKeypairAndTransactionId()
|
||
retval=ACWG_OK
|