Frank Morgner
e3947061c4
selectig eid after EAC
2013-02-01 01:18:36 +01:00
Frank Morgner
fae2b5441f
fixed referencing EAC_CTX in TA and CA
2013-01-31 22:26:56 +01:00
Frank Morgner
e01eae9ce3
added read and write of data groups
...
adds read_binary_rec and write_binary_rec to scutil.h
2013-01-29 15:51:35 +01:00
Frank Morgner
2905b067e5
fixed typo
2013-01-29 09:47:47 +01:00
Frank Morgner
6947ccb8be
added missing documentation
2012-12-17 21:53:50 +01:00
Frank Morgner
cff11a0b31
added overview about TA/CA to documentation
2012-12-16 04:26:30 +01:00
Frank Morgner
d479420463
include OpenSC as submodule
2012-12-16 04:09:25 +01:00
Frank Morgner
fe155bb002
fixed generation of documentation
2012-12-11 22:56:48 +01:00
Frank Morgner
e9e5c7668b
use OpenSC's hooks to wrap and unwrap SM APDUs
...
sm_transmit_apdu is obsolete. libnpa and OpenSC can be used in parallel
now. libnpa modifies OpenSC's card handle to add SM on the fly to any
OpenSC command. This, for example, allows PKCS#XX commands in a SM
channel established by libnpa.
2012-12-09 23:15:51 +01:00
Frank Morgner
758fe2b99f
nPA: fixed resume PIN command
...
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896
fixed printing of EAC CTX
2012-12-08 00:17:32 +01:00
Frank Morgner
de1378f780
always declare extended length capabilities
...
allows usage of an unpatched version of OpenPACE. libnpa now works with
the nPA using the default card driver.
2012-11-21 19:45:59 +01:00
Frank Morgner
77a52cc8e9
adapted to changes of OpenSC master
...
Now works with the stupid changes of OpenSC made in
41861e42b01539856b31f758dfde9ba53749eaaa
2012-11-21 19:45:59 +01:00
Frank Morgner
c6f61aa3eb
adapted to changes of OpenPACE
...
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6
adapted to latest changes of openpace
...
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
e8528c8297
disable check of validity period for testing
2012-11-01 07:32:52 +01:00
Frank Morgner
a00f305f2a
use default CHAT for testing
2012-11-01 07:25:49 +01:00
Frank Morgner
2b472133fd
for EAC, use terminal's CHAT by default
2012-11-01 07:24:14 +01:00
Frank Morgner
f683129a51
comprehensive checking for help2man and gengetopt
2012-10-26 22:08:56 +02:00
Frank Morgner
cc3095a2f0
comprehensive checking for help2man and gengetopt
2012-10-26 22:04:24 +02:00
Frank Morgner
38f2f363bf
comprehensive checking for help2man
2012-10-26 21:55:42 +02:00
Frank Morgner
5ab760e0c0
let MSE:Set AT distinguish between tags 83, 84
2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c
selecting MF on reset and power up
2012-10-11 22:22:57 +02:00
Frank Morgner
80f86b81ed
fixed wrong encoding of protected Le
2012-10-10 22:02:59 +02:00
Frank Morgner
4cba1d8ee2
added script to test vicc with npa-tool
2012-10-10 22:02:59 +02:00
Frank Morgner
a08ce27552
added calculation of longest encrypted short-length APDU
2012-10-10 22:02:59 +02:00
Frank Morgner
df00bca2f0
adapted to changes of openpace in 91d6ee1ec80f6...
2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350
nPA: added --cvca parameter
2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2
updated help for --disable-checks
2012-10-10 22:02:59 +02:00
Frank Morgner
1edbc97845
fixed memory leaks
2012-10-10 22:02:59 +02:00
Frank Morgner
e99979fab1
debug the result from CA's general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
be19c06e51
fixed short length SM APDUs (especially case 2)
2012-10-10 22:02:59 +02:00
Frank Morgner
80091a6997
fixed Le for get challenge
2012-10-10 22:02:59 +02:00
Frank Morgner
af9b2bf07d
nPA: using case 3 apdu for verify
2012-10-10 22:02:59 +02:00
Frank Morgner
6a36a8f733
fixed CLA of PACE's last general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2
nPA: updated CLI information regarding CAR
2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe
ignoring CVCA certificate for --disable-checks
...
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f
fixed PACE_STEP3D_verify_authentication_token
2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036
nPA: initialize ca without specifying protocol
2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c
ALGO_MAPPING: added oids for TA, CA, RI and PACE
2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8
nPA: removed --ca-pubkey command line option
...
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e
nPA: added option to disable validity period check
2012-10-10 22:02:59 +02:00
Frank Morgner
765d284bc4
Fixes for MSE:Set AT in TA and CA
...
- TA: fixed p1, p2 and include ephemeral pubkey and OID
- CA: include OID and leave out key reference
Currently it is hard to distinguish between the CA key and the
chip-individual key using the key references in
EF.CardSecurity/EF.CardAccess. The first (default) key in these files
should, however, be the CA key.
2012-10-10 22:01:36 +02:00
Frank Morgner
8a0e3cabbe
nPA: TA's ephemeral public key is saved as IV in CRT
2012-10-10 21:58:32 +02:00
Frank Morgner
4db95549c2
vpcd: fixed prototype of sendall
2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6
npa: pass authentication token as string
2012-10-10 21:58:32 +02:00
Frank Morgner
9bd34eae34
Added nPA example data
...
Taken from the official BSI EAC worked example.
2012-10-10 21:58:32 +02:00
Frank Morgner
5e4f7024e8
sc_format_apdu instead of manual initialisation
2012-10-10 21:58:32 +02:00
Frank Morgner
ad879e3da2
Send auxiliary data in MSE:Set AT for TA
2012-10-10 21:58:32 +02:00
Frank Morgner
080e7c6535
npa-tool: CLI to TA and CA
2012-10-10 21:58:32 +02:00