Frank Morgner
0aa531f25b
allow TA without PACE
2014-09-15 07:26:12 +02:00
Frank Morgner
3dddf0e809
use unified names for PACE secrets
2014-02-28 23:47:11 +01:00
Frank Morgner
d81491f4ea
better PIN handling
...
- avoid overloading of the unblocking command, instead perform resuming
the pin automatically.
- implemented cache for npa card driver
- added support for eSign PIN verification
- addes support for get pin info cmd
2014-02-28 23:19:42 +01:00
Frank Morgner
6b7d42000b
fixed resuming the PIN
...
initialization of the boxing commands in perform_pace always destroyed
the established security context.
2014-02-23 01:16:53 +01:00
Frank Morgner
a11be64015
catch and debug more errors
2013-10-21 21:01:08 +02:00
Frank Morgner
49b01ca750
adapted to changes of openpace ce89f8ee374d7926c3f4707b8c4d3ae3de506507
2013-08-21 07:30:08 +02:00
Frank Morgner
360ab99624
use sc_format_apdu where possible
2013-06-14 17:38:29 +02:00
Frank Morgner
70d10b9410
cleaned up scutils
...
- moved write/read_binary_rec to scutil.c
- removed unused handling of card driver
2013-06-13 08:25:11 +02:00
Frank Morgner
f73f5a328d
fixed memory leak
2013-06-12 21:35:35 +02:00
Frank Morgner
32a198f35b
updated license text
2013-06-11 09:21:32 +02:00
Frank Morgner
9236fc5e2e
fixed missing initialization of sm_ctx for PACE on reader
2013-06-09 23:23:36 +02:00
Frank Morgner
eef401af00
allow changing eID-PIN on reader's PIN pad
2013-06-09 23:23:36 +02:00
Frank Morgner
58055517ed
implemented boxing commands according to TR-03119
2013-06-09 23:23:36 +02:00
Frank Morgner
e1da1dc081
updated documentation
2013-02-09 23:44:14 +01:00
Frank Morgner
2e029de07d
added CLI flags do disable various checks
2013-02-09 23:44:00 +01:00
Frank Morgner
19f1db1b30
only warn about missing certificate description
2013-02-09 23:43:56 +01:00
Frank Morgner
7a85d916be
fixed asn1
2013-02-09 23:43:52 +01:00
Frank Morgner
8b0b502a1e
Added ASN.1 helper for auxiliary data
2013-02-09 23:43:35 +01:00
Frank Morgner
83b69396c9
fixed some compiler warnings
2013-02-09 23:43:30 +01:00
Frank Morgner
9340c66b75
check for NULL pointer
2013-02-09 23:43:12 +01:00
Frank Morgner
4fd23d08fb
fixed recursive write of EFs
2013-02-04 23:31:02 +01:00
Frank Morgner
a6a10d0b3e
fixed special functions
2013-02-04 23:08:00 +01:00
Frank Morgner
d98f4e57c9
added verification of age/validity/community
2013-02-03 22:27:02 +01:00
Frank Morgner
9f6ffc2fad
handling special Le's for encryption in iso SM driver
2013-02-01 01:18:36 +01:00
Frank Morgner
fae2b5441f
fixed referencing EAC_CTX in TA and CA
2013-01-31 22:26:56 +01:00
Frank Morgner
e01eae9ce3
added read and write of data groups
...
adds read_binary_rec and write_binary_rec to scutil.h
2013-01-29 15:51:35 +01:00
Frank Morgner
e9e5c7668b
use OpenSC's hooks to wrap and unwrap SM APDUs
...
sm_transmit_apdu is obsolete. libnpa and OpenSC can be used in parallel
now. libnpa modifies OpenSC's card handle to add SM on the fly to any
OpenSC command. This, for example, allows PKCS#XX commands in a SM
channel established by libnpa.
2012-12-09 23:15:51 +01:00
Frank Morgner
de1378f780
always declare extended length capabilities
...
allows usage of an unpatched version of OpenPACE. libnpa now works with
the nPA using the default card driver.
2012-11-21 19:45:59 +01:00
Frank Morgner
77a52cc8e9
adapted to changes of OpenSC master
...
Now works with the stupid changes of OpenSC made in
41861e42b01539856b31f758dfde9ba53749eaaa
2012-11-21 19:45:59 +01:00
Frank Morgner
c6f61aa3eb
adapted to changes of OpenPACE
...
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6
adapted to latest changes of openpace
...
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
a08ce27552
added calculation of longest encrypted short-length APDU
2012-10-10 22:02:59 +02:00
Frank Morgner
df00bca2f0
adapted to changes of openpace in 91d6ee1ec80f6...
2012-10-10 22:02:59 +02:00
Frank Morgner
1edbc97845
fixed memory leaks
2012-10-10 22:02:59 +02:00
Frank Morgner
e99979fab1
debug the result from CA's general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
80091a6997
fixed Le for get challenge
2012-10-10 22:02:59 +02:00
Frank Morgner
af9b2bf07d
nPA: using case 3 apdu for verify
2012-10-10 22:02:59 +02:00
Frank Morgner
6a36a8f733
fixed CLA of PACE's last general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e
nPA: added option to disable validity period check
2012-10-10 22:02:59 +02:00
Frank Morgner
765d284bc4
Fixes for MSE:Set AT in TA and CA
...
- TA: fixed p1, p2 and include ephemeral pubkey and OID
- CA: include OID and leave out key reference
Currently it is hard to distinguish between the CA key and the
chip-individual key using the key references in
EF.CardSecurity/EF.CardAccess. The first (default) key in these files
should, however, be the CA key.
2012-10-10 22:01:36 +02:00
Frank Morgner
5e4f7024e8
sc_format_apdu instead of manual initialisation
2012-10-10 21:58:32 +02:00
Frank Morgner
ad879e3da2
Send auxiliary data in MSE:Set AT for TA
2012-10-10 21:58:32 +02:00
Frank Morgner
080e7c6535
npa-tool: CLI to TA and CA
2012-10-10 21:58:32 +02:00
Frank Morgner
85e1c317b6
libnpa: Implementation of CA
2012-10-10 21:58:29 +02:00
Frank Morgner
7145984d5f
libnpa: Implementation of TA
2012-10-10 21:46:30 +02:00
Frank Morgner
66ffb3675d
added switch to disable apdu checking for TA/CA
2012-09-18 22:45:39 +02:00
Frank Morgner
00f262ad68
fetch CAR for TA from MSE:Set AT
2012-09-18 22:45:36 +02:00
Frank Morgner
70a108dfe3
adapted to changes of OpenPACE
2012-09-18 00:28:33 +02:00
frankmorgner
5cb82ab12a
using selection by short identifier when reading ef.cardaccess. Fixes #3532221
...
git-svn-id: https://vsmartcard.svn.sourceforge.net/svnroot/vsmartcard@783 96b47cad-a561-4643-ad3b-153ac7d7599c
2012-06-22 10:08:31 +00:00
frankmorgner
78fd66c8b5
fixed clang --analyze warnings
...
git-svn-id: https://vsmartcard.svn.sourceforge.net/svnroot/vsmartcard@780 96b47cad-a561-4643-ad3b-153ac7d7599c
2012-04-24 12:10:44 +00:00