Frank Morgner
758fe2b99f
nPA: fixed resume PIN command
...
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896
fixed printing of EAC CTX
2012-12-08 00:17:32 +01:00
Frank Morgner
de1378f780
always declare extended length capabilities
...
allows usage of an unpatched version of OpenPACE. libnpa now works with
the nPA using the default card driver.
2012-11-21 19:45:59 +01:00
Frank Morgner
77a52cc8e9
adapted to changes of OpenSC master
...
Now works with the stupid changes of OpenSC made in
41861e42b01539856b31f758dfde9ba53749eaaa
2012-11-21 19:45:59 +01:00
Frank Morgner
c6f61aa3eb
adapted to changes of OpenPACE
...
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6
adapted to latest changes of openpace
...
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
e8528c8297
disable check of validity period for testing
2012-11-01 07:32:52 +01:00
Frank Morgner
a00f305f2a
use default CHAT for testing
2012-11-01 07:25:49 +01:00
Frank Morgner
2b472133fd
for EAC, use terminal's CHAT by default
2012-11-01 07:24:14 +01:00
Frank Morgner
f683129a51
comprehensive checking for help2man and gengetopt
2012-10-26 22:08:56 +02:00
Frank Morgner
cc3095a2f0
comprehensive checking for help2man and gengetopt
2012-10-26 22:04:24 +02:00
Frank Morgner
38f2f363bf
comprehensive checking for help2man
2012-10-26 21:55:42 +02:00
Frank Morgner
5ab760e0c0
let MSE:Set AT distinguish between tags 83, 84
2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c
selecting MF on reset and power up
2012-10-11 22:22:57 +02:00
Frank Morgner
80f86b81ed
fixed wrong encoding of protected Le
2012-10-10 22:02:59 +02:00
Frank Morgner
4cba1d8ee2
added script to test vicc with npa-tool
2012-10-10 22:02:59 +02:00
Frank Morgner
a08ce27552
added calculation of longest encrypted short-length APDU
2012-10-10 22:02:59 +02:00
Frank Morgner
df00bca2f0
adapted to changes of openpace in 91d6ee1ec80f6...
2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350
nPA: added --cvca parameter
2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2
updated help for --disable-checks
2012-10-10 22:02:59 +02:00
Frank Morgner
1edbc97845
fixed memory leaks
2012-10-10 22:02:59 +02:00
Frank Morgner
e99979fab1
debug the result from CA's general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
be19c06e51
fixed short length SM APDUs (especially case 2)
2012-10-10 22:02:59 +02:00
Frank Morgner
80091a6997
fixed Le for get challenge
2012-10-10 22:02:59 +02:00
Frank Morgner
af9b2bf07d
nPA: using case 3 apdu for verify
2012-10-10 22:02:59 +02:00
Frank Morgner
6a36a8f733
fixed CLA of PACE's last general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2
nPA: updated CLI information regarding CAR
2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe
ignoring CVCA certificate for --disable-checks
...
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f
fixed PACE_STEP3D_verify_authentication_token
2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036
nPA: initialize ca without specifying protocol
2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c
ALGO_MAPPING: added oids for TA, CA, RI and PACE
2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8
nPA: removed --ca-pubkey command line option
...
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e
nPA: added option to disable validity period check
2012-10-10 22:02:59 +02:00
Frank Morgner
765d284bc4
Fixes for MSE:Set AT in TA and CA
...
- TA: fixed p1, p2 and include ephemeral pubkey and OID
- CA: include OID and leave out key reference
Currently it is hard to distinguish between the CA key and the
chip-individual key using the key references in
EF.CardSecurity/EF.CardAccess. The first (default) key in these files
should, however, be the CA key.
2012-10-10 22:01:36 +02:00
Frank Morgner
8a0e3cabbe
nPA: TA's ephemeral public key is saved as IV in CRT
2012-10-10 21:58:32 +02:00
Frank Morgner
4db95549c2
vpcd: fixed prototype of sendall
2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6
npa: pass authentication token as string
2012-10-10 21:58:32 +02:00
Frank Morgner
9bd34eae34
Added nPA example data
...
Taken from the official BSI EAC worked example.
2012-10-10 21:58:32 +02:00
Frank Morgner
5e4f7024e8
sc_format_apdu instead of manual initialisation
2012-10-10 21:58:32 +02:00
Frank Morgner
ad879e3da2
Send auxiliary data in MSE:Set AT for TA
2012-10-10 21:58:32 +02:00
Frank Morgner
080e7c6535
npa-tool: CLI to TA and CA
2012-10-10 21:58:32 +02:00
Frank Morgner
85e1c317b6
libnpa: Implementation of CA
2012-10-10 21:58:29 +02:00
Frank Morgner
062cf21bb2
added fids for EF.CardSecurity
2012-10-10 21:46:33 +02:00
Frank Morgner
7145984d5f
libnpa: Implementation of TA
2012-10-10 21:46:30 +02:00
Frank Morgner
66ffb3675d
added switch to disable apdu checking for TA/CA
2012-09-18 22:45:39 +02:00
Frank Morgner
00f262ad68
fetch CAR for TA from MSE:Set AT
2012-09-18 22:45:36 +02:00
Frank Morgner
70a108dfe3
adapted to changes of OpenPACE
2012-09-18 00:28:33 +02:00
Frank Morgner
fc0310359d
nPA: Skip RI, community and age verification
...
simply return 0x9000 saying "yes" to everything
2012-09-14 15:09:31 +02:00
Frank Morgner
8b3d802cab
fixed offset checking for empty files
2012-09-14 15:09:01 +02:00
Frank Morgner
c263b1f9dc
nPA: added support for checking Expiry date
2012-09-13 15:21:07 +02:00