Commit Graph

230 Commits

Author SHA1 Message Date
Frank Morgner
c9aed4f5aa fix return code for blocked PIN 2014-02-28 23:20:02 +01:00
Frank Morgner
54e71a1028 use a 10 digit puk 2014-02-28 23:12:26 +01:00
Frank Morgner
6ad3f6070c return remaining tries of PIN verification in MSE:Set AT 2014-02-28 22:29:29 +01:00
Frank Morgner
9b40f70ad8 use a correct mrz by default 2014-02-23 01:16:53 +01:00
Frank Morgner
0e9b87cc7b use python wrappers to EAC_CTX and PACE_SEC
requires openpace 17891be5ee99d32e67bd954fbb26ff5eab6a0609
2013-11-01 19:38:52 +01:00
Frank Morgner
9970fbe742 don't use hard coded domain parameters for CA
needs OpenPACE 32d42f3b337cb0e9fca5a76824e471f431f4fbe0
2013-10-25 22:14:15 +02:00
Frank Morgner
ca5dfae640 use convenience wrapper for TA step 6 2013-10-23 09:55:12 +02:00
Frank Morgner
372ec6c265 hard coded CA protocol parameters are required currently
otherwise the curve will be unknown in OpenPACE. Fixes bug in
combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and
later
2013-10-22 20:56:14 +02:00
Frank Morgner
a11be64015 catch and debug more errors 2013-10-21 21:01:08 +02:00
Frank Morgner
e76238505b iv is mandatory in python-crypto now 2013-09-30 13:52:17 +02:00
Frank Morgner
951c5473bd use a faked rID 2013-09-25 07:38:57 +02:00
Frank Morgner
15a53a39df use EAC_init() and EAC_cleanup() 2013-09-25 07:22:37 +02:00
Frank Morgner
12aef1e72f added more fci data for nPA 2013-09-11 06:38:56 +02:00
Frank Morgner
17ddef0297 reversed connection mode: allow vpcd to reconnect 2013-08-07 23:57:02 +02:00
Frank Morgner
4d1e67a26e use a valid ATR for handler_test 2013-07-19 23:51:00 +02:00
Frank Morgner
a766a6e01a fixed handling of SW1=0x61 in handler_test 2013-07-19 23:51:00 +02:00
Frank Morgner
291178d139 implemented reversed connection establishment
vpcd can now be configured connect to a previously started vpicc.
2013-07-15 10:18:40 +02:00
Frank Morgner
d6bf6a0b93 fixed extracting reference flags for select 2013-07-09 07:34:05 +02:00
Frank Morgner
8e5d044ab5 catch SwErrors in formatResult 2013-07-09 07:24:15 +02:00
Frank Morgner
50b2f85cc4 switch verbosity level via command line 2013-07-09 07:22:12 +02:00
Frank Morgner
68e01ac452 use hexdump to print strings of objects 2013-07-09 07:20:18 +02:00
Frank Morgner
8c1694f5b4 raise a SW error on failed decryption 2013-07-09 07:10:18 +02:00
Frank Morgner
a082227347 wrap errors in sm if decryption was successfull 2013-07-09 07:09:28 +02:00
Frank Morgner
31ff210f08 include program version in help 2013-06-27 00:25:05 +02:00
Frank Morgner
9c259f4af7 implemented vicc to pass PCSC-Lite's handler_test 2013-06-27 00:02:46 +02:00
Frank Morgner
2d64ca4e14 fixed asn1 structure of nPA's default data 2013-06-25 23:05:54 +02:00
Frank Morgner
59eaa16c45 include a summary in documentation and tools 2013-06-17 10:03:38 +02:00
Frank Morgner
5db6ce6935 added default cvca trust anchor (German eID PKI) 2013-06-11 15:13:22 +02:00
Frank Morgner
686eb9d455 added meaningfull default data 2013-06-09 23:23:36 +02:00
Frank Morgner
e1da1dc081 updated documentation 2013-02-09 23:44:14 +01:00
Frank Morgner
a0b37e1296 fixed import of EF.CardSecurity
was a degradation of OpenPACE 7016e1a6e958cb7b9a241c059deb807f31dff5fe
2013-02-09 23:44:04 +01:00
Frank Morgner
758fe2b99f nPA: fixed resume PIN command
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896 fixed printing of EAC CTX 2012-12-08 00:17:32 +01:00
Frank Morgner
c6f61aa3eb adapted to changes of OpenPACE
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6 adapted to latest changes of openpace
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
5ab760e0c0 let MSE:Set AT distinguish between tags 83, 84 2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c selecting MF on reset and power up 2012-10-11 22:22:57 +02:00
Frank Morgner
df00bca2f0 adapted to changes of openpace in 91d6ee1ec80f6... 2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350 nPA: added --cvca parameter 2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2 updated help for --disable-checks 2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2 nPA: updated CLI information regarding CAR 2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe ignoring CVCA certificate for --disable-checks
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f fixed PACE_STEP3D_verify_authentication_token 2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036 nPA: initialize ca without specifying protocol 2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c ALGO_MAPPING: added oids for TA, CA, RI and PACE 2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8 nPA: removed --ca-pubkey command line option
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e nPA: added option to disable validity period check 2012-10-10 22:02:59 +02:00
Frank Morgner
8a0e3cabbe nPA: TA's ephemeral public key is saved as IV in CRT 2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6 npa: pass authentication token as string 2012-10-10 21:58:32 +02:00
Frank Morgner
fc0310359d nPA: Skip RI, community and age verification
simply return 0x9000 saying "yes" to everything
2012-09-14 15:09:31 +02:00