From 372ec6c265c42dea2c3a9c8806393d7740782baa Mon Sep 17 00:00:00 2001 From: Frank Morgner Date: Tue, 22 Oct 2013 18:00:48 +0200 Subject: [PATCH] hard coded CA protocol parameters are required currently otherwise the curve will be unknown in OpenPACE. Fixes bug in combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and later --- virtualsmartcard/src/vpicc/virtualsmartcard/cards/nPA.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/virtualsmartcard/src/vpicc/virtualsmartcard/cards/nPA.py b/virtualsmartcard/src/vpicc/virtualsmartcard/cards/nPA.py index 45baf97..cb036cd 100644 --- a/virtualsmartcard/src/vpicc/virtualsmartcard/cards/nPA.py +++ b/virtualsmartcard/src/vpicc/virtualsmartcard/cards/nPA.py @@ -208,7 +208,7 @@ class nPA_SE(Security_Environment): ef_card_security_data = ef_card_security.data pace.CA_disable_passive_authentication(self.eac_ctx) ca_pubkey = pace.CA_get_pubkey(self.eac_ctx, ef_card_security_data) - pace.EAC_CTX_init_ca(self.eac_ctx, 0, 0, self.ca_key, ca_pubkey) + pace.EAC_CTX_init_ca(self.eac_ctx, pace.id_CA_ECDH_AES_CBC_CMAC_128, 13, self.ca_key, ca_pubkey) if not self.ca_key: # we don't have a good CA key, so we simply generate an ephemeral one