Frank Morgner
372ec6c265
hard coded CA protocol parameters are required currently
...
otherwise the curve will be unknown in OpenPACE. Fixes bug in
combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and
later
2013-10-22 20:56:14 +02:00
Frank Morgner
a11be64015
catch and debug more errors
2013-10-21 21:01:08 +02:00
Frank Morgner
e76238505b
iv is mandatory in python-crypto now
2013-09-30 13:52:17 +02:00
Frank Morgner
951c5473bd
use a faked rID
2013-09-25 07:38:57 +02:00
Frank Morgner
15a53a39df
use EAC_init() and EAC_cleanup()
2013-09-25 07:22:37 +02:00
Frank Morgner
12aef1e72f
added more fci data for nPA
2013-09-11 06:38:56 +02:00
Frank Morgner
17ddef0297
reversed connection mode: allow vpcd to reconnect
2013-08-07 23:57:02 +02:00
Frank Morgner
4d1e67a26e
use a valid ATR for handler_test
2013-07-19 23:51:00 +02:00
Frank Morgner
a766a6e01a
fixed handling of SW1=0x61 in handler_test
2013-07-19 23:51:00 +02:00
Frank Morgner
291178d139
implemented reversed connection establishment
...
vpcd can now be configured connect to a previously started vpicc.
2013-07-15 10:18:40 +02:00
Frank Morgner
d6bf6a0b93
fixed extracting reference flags for select
2013-07-09 07:34:05 +02:00
Frank Morgner
8e5d044ab5
catch SwErrors in formatResult
2013-07-09 07:24:15 +02:00
Frank Morgner
50b2f85cc4
switch verbosity level via command line
2013-07-09 07:22:12 +02:00
Frank Morgner
68e01ac452
use hexdump to print strings of objects
2013-07-09 07:20:18 +02:00
Frank Morgner
8c1694f5b4
raise a SW error on failed decryption
2013-07-09 07:10:18 +02:00
Frank Morgner
a082227347
wrap errors in sm if decryption was successfull
2013-07-09 07:09:28 +02:00
Frank Morgner
31ff210f08
include program version in help
2013-06-27 00:25:05 +02:00
Frank Morgner
9c259f4af7
implemented vicc to pass PCSC-Lite's handler_test
2013-06-27 00:02:46 +02:00
Frank Morgner
2d64ca4e14
fixed asn1 structure of nPA's default data
2013-06-25 23:05:54 +02:00
Frank Morgner
59eaa16c45
include a summary in documentation and tools
2013-06-17 10:03:38 +02:00
Frank Morgner
5db6ce6935
added default cvca trust anchor (German eID PKI)
2013-06-11 15:13:22 +02:00
Frank Morgner
686eb9d455
added meaningfull default data
2013-06-09 23:23:36 +02:00
Frank Morgner
e1da1dc081
updated documentation
2013-02-09 23:44:14 +01:00
Frank Morgner
a0b37e1296
fixed import of EF.CardSecurity
...
was a degradation of OpenPACE 7016e1a6e958cb7b9a241c059deb807f31dff5fe
2013-02-09 23:44:04 +01:00
Frank Morgner
758fe2b99f
nPA: fixed resume PIN command
...
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896
fixed printing of EAC CTX
2012-12-08 00:17:32 +01:00
Frank Morgner
c6f61aa3eb
adapted to changes of OpenPACE
...
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6
adapted to latest changes of openpace
...
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
5ab760e0c0
let MSE:Set AT distinguish between tags 83, 84
2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c
selecting MF on reset and power up
2012-10-11 22:22:57 +02:00
Frank Morgner
df00bca2f0
adapted to changes of openpace in 91d6ee1ec80f6...
2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350
nPA: added --cvca parameter
2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2
updated help for --disable-checks
2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2
nPA: updated CLI information regarding CAR
2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe
ignoring CVCA certificate for --disable-checks
...
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f
fixed PACE_STEP3D_verify_authentication_token
2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036
nPA: initialize ca without specifying protocol
2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c
ALGO_MAPPING: added oids for TA, CA, RI and PACE
2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8
nPA: removed --ca-pubkey command line option
...
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e
nPA: added option to disable validity period check
2012-10-10 22:02:59 +02:00
Frank Morgner
8a0e3cabbe
nPA: TA's ephemeral public key is saved as IV in CRT
2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6
npa: pass authentication token as string
2012-10-10 21:58:32 +02:00
Frank Morgner
fc0310359d
nPA: Skip RI, community and age verification
...
simply return 0x9000 saying "yes" to everything
2012-09-14 15:09:31 +02:00
Frank Morgner
8b3d802cab
fixed offset checking for empty files
2012-09-14 15:09:01 +02:00
Frank Morgner
c263b1f9dc
nPA: added support for checking Expiry date
2012-09-13 15:21:07 +02:00
Frank Morgner
5c2215a05b
fixed parsing of CLA with proprietary SM
...
activates SM also for the proprietary case
2012-09-13 15:20:06 +02:00
Frank Morgner
fd154f7c99
nPA: added stubs for eid application
2012-09-06 10:18:08 +02:00
Frank Morgner
d8bbf4eedb
switching encryption context of current SE in SAM
2012-09-06 09:52:19 +02:00
Frank Morgner
aa0647d9b4
nPA: added FIXME for EF.CardSecurity manipulation
2012-09-05 10:09:52 +02:00
Frank Morgner
f6e922222e
removed the currently unused getenc and setenc
...
These functions intended to do encryption and decryption respecting file
acls. This however was never implemented. Better use object properties
with appropriately setters and getters to realize this functionality.
2012-09-05 09:54:06 +02:00