Frank Morgner
54e71a1028
use a 10 digit puk
2014-02-28 23:12:26 +01:00
Frank Morgner
6ad3f6070c
return remaining tries of PIN verification in MSE:Set AT
2014-02-28 22:29:29 +01:00
Frank Morgner
9b40f70ad8
use a correct mrz by default
2014-02-23 01:16:53 +01:00
Frank Morgner
0e9b87cc7b
use python wrappers to EAC_CTX and PACE_SEC
...
requires openpace 17891be5ee99d32e67bd954fbb26ff5eab6a0609
2013-11-01 19:38:52 +01:00
Frank Morgner
9970fbe742
don't use hard coded domain parameters for CA
...
needs OpenPACE 32d42f3b337cb0e9fca5a76824e471f431f4fbe0
2013-10-25 22:14:15 +02:00
Frank Morgner
ca5dfae640
use convenience wrapper for TA step 6
2013-10-23 09:55:12 +02:00
Frank Morgner
372ec6c265
hard coded CA protocol parameters are required currently
...
otherwise the curve will be unknown in OpenPACE. Fixes bug in
combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and
later
2013-10-22 20:56:14 +02:00
Frank Morgner
a11be64015
catch and debug more errors
2013-10-21 21:01:08 +02:00
Frank Morgner
e76238505b
iv is mandatory in python-crypto now
2013-09-30 13:52:17 +02:00
Frank Morgner
951c5473bd
use a faked rID
2013-09-25 07:38:57 +02:00
Frank Morgner
15a53a39df
use EAC_init() and EAC_cleanup()
2013-09-25 07:22:37 +02:00
Frank Morgner
12aef1e72f
added more fci data for nPA
2013-09-11 06:38:56 +02:00
Frank Morgner
17ddef0297
reversed connection mode: allow vpcd to reconnect
2013-08-07 23:57:02 +02:00
Frank Morgner
4d1e67a26e
use a valid ATR for handler_test
2013-07-19 23:51:00 +02:00
Frank Morgner
a766a6e01a
fixed handling of SW1=0x61 in handler_test
2013-07-19 23:51:00 +02:00
Frank Morgner
291178d139
implemented reversed connection establishment
...
vpcd can now be configured connect to a previously started vpicc.
2013-07-15 10:18:40 +02:00
Frank Morgner
d6bf6a0b93
fixed extracting reference flags for select
2013-07-09 07:34:05 +02:00
Frank Morgner
8e5d044ab5
catch SwErrors in formatResult
2013-07-09 07:24:15 +02:00
Frank Morgner
50b2f85cc4
switch verbosity level via command line
2013-07-09 07:22:12 +02:00
Frank Morgner
68e01ac452
use hexdump to print strings of objects
2013-07-09 07:20:18 +02:00
Frank Morgner
8c1694f5b4
raise a SW error on failed decryption
2013-07-09 07:10:18 +02:00
Frank Morgner
a082227347
wrap errors in sm if decryption was successfull
2013-07-09 07:09:28 +02:00
Frank Morgner
31ff210f08
include program version in help
2013-06-27 00:25:05 +02:00
Frank Morgner
9c259f4af7
implemented vicc to pass PCSC-Lite's handler_test
2013-06-27 00:02:46 +02:00
Frank Morgner
2d64ca4e14
fixed asn1 structure of nPA's default data
2013-06-25 23:05:54 +02:00
Frank Morgner
59eaa16c45
include a summary in documentation and tools
2013-06-17 10:03:38 +02:00
Frank Morgner
5db6ce6935
added default cvca trust anchor (German eID PKI)
2013-06-11 15:13:22 +02:00
Frank Morgner
686eb9d455
added meaningfull default data
2013-06-09 23:23:36 +02:00
Frank Morgner
e1da1dc081
updated documentation
2013-02-09 23:44:14 +01:00
Frank Morgner
a0b37e1296
fixed import of EF.CardSecurity
...
was a degradation of OpenPACE 7016e1a6e958cb7b9a241c059deb807f31dff5fe
2013-02-09 23:44:04 +01:00
Frank Morgner
758fe2b99f
nPA: fixed resume PIN command
...
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896
fixed printing of EAC CTX
2012-12-08 00:17:32 +01:00
Frank Morgner
c6f61aa3eb
adapted to changes of OpenPACE
...
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6
adapted to latest changes of openpace
...
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
5ab760e0c0
let MSE:Set AT distinguish between tags 83, 84
2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c
selecting MF on reset and power up
2012-10-11 22:22:57 +02:00
Frank Morgner
df00bca2f0
adapted to changes of openpace in 91d6ee1ec80f6...
2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350
nPA: added --cvca parameter
2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2
updated help for --disable-checks
2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2
nPA: updated CLI information regarding CAR
2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe
ignoring CVCA certificate for --disable-checks
...
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f
fixed PACE_STEP3D_verify_authentication_token
2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036
nPA: initialize ca without specifying protocol
2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c
ALGO_MAPPING: added oids for TA, CA, RI and PACE
2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8
nPA: removed --ca-pubkey command line option
...
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e
nPA: added option to disable validity period check
2012-10-10 22:02:59 +02:00
Frank Morgner
8a0e3cabbe
nPA: TA's ephemeral public key is saved as IV in CRT
2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6
npa: pass authentication token as string
2012-10-10 21:58:32 +02:00
Frank Morgner
fc0310359d
nPA: Skip RI, community and age verification
...
simply return 0x9000 saying "yes" to everything
2012-09-14 15:09:31 +02:00
Frank Morgner
8b3d802cab
fixed offset checking for empty files
2012-09-14 15:09:01 +02:00