Commit Graph

223 Commits

Author SHA1 Message Date
Frank Morgner
372ec6c265 hard coded CA protocol parameters are required currently
otherwise the curve will be unknown in OpenPACE. Fixes bug in
combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and
later
2013-10-22 20:56:14 +02:00
Frank Morgner
a11be64015 catch and debug more errors 2013-10-21 21:01:08 +02:00
Frank Morgner
e76238505b iv is mandatory in python-crypto now 2013-09-30 13:52:17 +02:00
Frank Morgner
951c5473bd use a faked rID 2013-09-25 07:38:57 +02:00
Frank Morgner
15a53a39df use EAC_init() and EAC_cleanup() 2013-09-25 07:22:37 +02:00
Frank Morgner
12aef1e72f added more fci data for nPA 2013-09-11 06:38:56 +02:00
Frank Morgner
17ddef0297 reversed connection mode: allow vpcd to reconnect 2013-08-07 23:57:02 +02:00
Frank Morgner
4d1e67a26e use a valid ATR for handler_test 2013-07-19 23:51:00 +02:00
Frank Morgner
a766a6e01a fixed handling of SW1=0x61 in handler_test 2013-07-19 23:51:00 +02:00
Frank Morgner
291178d139 implemented reversed connection establishment
vpcd can now be configured connect to a previously started vpicc.
2013-07-15 10:18:40 +02:00
Frank Morgner
d6bf6a0b93 fixed extracting reference flags for select 2013-07-09 07:34:05 +02:00
Frank Morgner
8e5d044ab5 catch SwErrors in formatResult 2013-07-09 07:24:15 +02:00
Frank Morgner
50b2f85cc4 switch verbosity level via command line 2013-07-09 07:22:12 +02:00
Frank Morgner
68e01ac452 use hexdump to print strings of objects 2013-07-09 07:20:18 +02:00
Frank Morgner
8c1694f5b4 raise a SW error on failed decryption 2013-07-09 07:10:18 +02:00
Frank Morgner
a082227347 wrap errors in sm if decryption was successfull 2013-07-09 07:09:28 +02:00
Frank Morgner
31ff210f08 include program version in help 2013-06-27 00:25:05 +02:00
Frank Morgner
9c259f4af7 implemented vicc to pass PCSC-Lite's handler_test 2013-06-27 00:02:46 +02:00
Frank Morgner
2d64ca4e14 fixed asn1 structure of nPA's default data 2013-06-25 23:05:54 +02:00
Frank Morgner
59eaa16c45 include a summary in documentation and tools 2013-06-17 10:03:38 +02:00
Frank Morgner
5db6ce6935 added default cvca trust anchor (German eID PKI) 2013-06-11 15:13:22 +02:00
Frank Morgner
686eb9d455 added meaningfull default data 2013-06-09 23:23:36 +02:00
Frank Morgner
e1da1dc081 updated documentation 2013-02-09 23:44:14 +01:00
Frank Morgner
a0b37e1296 fixed import of EF.CardSecurity
was a degradation of OpenPACE 7016e1a6e958cb7b9a241c059deb807f31dff5fe
2013-02-09 23:44:04 +01:00
Frank Morgner
758fe2b99f nPA: fixed resume PIN command
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896 fixed printing of EAC CTX 2012-12-08 00:17:32 +01:00
Frank Morgner
c6f61aa3eb adapted to changes of OpenPACE
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6 adapted to latest changes of openpace
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
5ab760e0c0 let MSE:Set AT distinguish between tags 83, 84 2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c selecting MF on reset and power up 2012-10-11 22:22:57 +02:00
Frank Morgner
df00bca2f0 adapted to changes of openpace in 91d6ee1ec80f6... 2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350 nPA: added --cvca parameter 2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2 updated help for --disable-checks 2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2 nPA: updated CLI information regarding CAR 2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe ignoring CVCA certificate for --disable-checks
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f fixed PACE_STEP3D_verify_authentication_token 2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036 nPA: initialize ca without specifying protocol 2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c ALGO_MAPPING: added oids for TA, CA, RI and PACE 2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8 nPA: removed --ca-pubkey command line option
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e nPA: added option to disable validity period check 2012-10-10 22:02:59 +02:00
Frank Morgner
8a0e3cabbe nPA: TA's ephemeral public key is saved as IV in CRT 2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6 npa: pass authentication token as string 2012-10-10 21:58:32 +02:00
Frank Morgner
fc0310359d nPA: Skip RI, community and age verification
simply return 0x9000 saying "yes" to everything
2012-09-14 15:09:31 +02:00
Frank Morgner
8b3d802cab fixed offset checking for empty files 2012-09-14 15:09:01 +02:00
Frank Morgner
c263b1f9dc nPA: added support for checking Expiry date 2012-09-13 15:21:07 +02:00
Frank Morgner
5c2215a05b fixed parsing of CLA with proprietary SM
activates SM also for the proprietary case
2012-09-13 15:20:06 +02:00
Frank Morgner
fd154f7c99 nPA: added stubs for eid application 2012-09-06 10:18:08 +02:00
Frank Morgner
d8bbf4eedb switching encryption context of current SE in SAM 2012-09-06 09:52:19 +02:00
Frank Morgner
aa0647d9b4 nPA: added FIXME for EF.CardSecurity manipulation 2012-09-05 10:09:52 +02:00
Frank Morgner
f6e922222e removed the currently unused getenc and setenc
These functions intended to do encryption and decryption respecting file
acls. This however was never implemented. Better use object properties
with appropriately setters and getters to realize this functionality.
2012-09-05 09:54:06 +02:00