Frank Morgner
e8528c8297
disable check of validity period for testing
2012-11-01 07:32:52 +01:00
Frank Morgner
a00f305f2a
use default CHAT for testing
2012-11-01 07:25:49 +01:00
Frank Morgner
2b472133fd
for EAC, use terminal's CHAT by default
2012-11-01 07:24:14 +01:00
Frank Morgner
f683129a51
comprehensive checking for help2man and gengetopt
2012-10-26 22:08:56 +02:00
Frank Morgner
cc3095a2f0
comprehensive checking for help2man and gengetopt
2012-10-26 22:04:24 +02:00
Frank Morgner
38f2f363bf
comprehensive checking for help2man
2012-10-26 21:55:42 +02:00
Frank Morgner
5ab760e0c0
let MSE:Set AT distinguish between tags 83, 84
2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c
selecting MF on reset and power up
2012-10-11 22:22:57 +02:00
Frank Morgner
80f86b81ed
fixed wrong encoding of protected Le
2012-10-10 22:02:59 +02:00
Frank Morgner
4cba1d8ee2
added script to test vicc with npa-tool
2012-10-10 22:02:59 +02:00
Frank Morgner
a08ce27552
added calculation of longest encrypted short-length APDU
2012-10-10 22:02:59 +02:00
Frank Morgner
df00bca2f0
adapted to changes of openpace in 91d6ee1ec80f6...
2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350
nPA: added --cvca parameter
2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2
updated help for --disable-checks
2012-10-10 22:02:59 +02:00
Frank Morgner
1edbc97845
fixed memory leaks
2012-10-10 22:02:59 +02:00
Frank Morgner
e99979fab1
debug the result from CA's general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
be19c06e51
fixed short length SM APDUs (especially case 2)
2012-10-10 22:02:59 +02:00
Frank Morgner
80091a6997
fixed Le for get challenge
2012-10-10 22:02:59 +02:00
Frank Morgner
af9b2bf07d
nPA: using case 3 apdu for verify
2012-10-10 22:02:59 +02:00
Frank Morgner
6a36a8f733
fixed CLA of PACE's last general authenticate
2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2
nPA: updated CLI information regarding CAR
2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe
ignoring CVCA certificate for --disable-checks
...
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f
fixed PACE_STEP3D_verify_authentication_token
2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036
nPA: initialize ca without specifying protocol
2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c
ALGO_MAPPING: added oids for TA, CA, RI and PACE
2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8
nPA: removed --ca-pubkey command line option
...
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e
nPA: added option to disable validity period check
2012-10-10 22:02:59 +02:00
Frank Morgner
765d284bc4
Fixes for MSE:Set AT in TA and CA
...
- TA: fixed p1, p2 and include ephemeral pubkey and OID
- CA: include OID and leave out key reference
Currently it is hard to distinguish between the CA key and the
chip-individual key using the key references in
EF.CardSecurity/EF.CardAccess. The first (default) key in these files
should, however, be the CA key.
2012-10-10 22:01:36 +02:00
Frank Morgner
8a0e3cabbe
nPA: TA's ephemeral public key is saved as IV in CRT
2012-10-10 21:58:32 +02:00
Frank Morgner
4db95549c2
vpcd: fixed prototype of sendall
2012-10-10 21:58:32 +02:00
Frank Morgner
bc570248b6
npa: pass authentication token as string
2012-10-10 21:58:32 +02:00
Frank Morgner
9bd34eae34
Added nPA example data
...
Taken from the official BSI EAC worked example.
2012-10-10 21:58:32 +02:00
Frank Morgner
5e4f7024e8
sc_format_apdu instead of manual initialisation
2012-10-10 21:58:32 +02:00
Frank Morgner
ad879e3da2
Send auxiliary data in MSE:Set AT for TA
2012-10-10 21:58:32 +02:00
Frank Morgner
080e7c6535
npa-tool: CLI to TA and CA
2012-10-10 21:58:32 +02:00
Frank Morgner
85e1c317b6
libnpa: Implementation of CA
2012-10-10 21:58:29 +02:00
Frank Morgner
062cf21bb2
added fids for EF.CardSecurity
2012-10-10 21:46:33 +02:00
Frank Morgner
7145984d5f
libnpa: Implementation of TA
2012-10-10 21:46:30 +02:00
Frank Morgner
66ffb3675d
added switch to disable apdu checking for TA/CA
2012-09-18 22:45:39 +02:00
Frank Morgner
00f262ad68
fetch CAR for TA from MSE:Set AT
2012-09-18 22:45:36 +02:00
Frank Morgner
70a108dfe3
adapted to changes of OpenPACE
2012-09-18 00:28:33 +02:00
Frank Morgner
fc0310359d
nPA: Skip RI, community and age verification
...
simply return 0x9000 saying "yes" to everything
2012-09-14 15:09:31 +02:00
Frank Morgner
8b3d802cab
fixed offset checking for empty files
2012-09-14 15:09:01 +02:00
Frank Morgner
c263b1f9dc
nPA: added support for checking Expiry date
2012-09-13 15:21:07 +02:00
Frank Morgner
5c2215a05b
fixed parsing of CLA with proprietary SM
...
activates SM also for the proprietary case
2012-09-13 15:20:06 +02:00
Frank Morgner
fd154f7c99
nPA: added stubs for eid application
2012-09-06 10:18:08 +02:00
Frank Morgner
d8bbf4eedb
switching encryption context of current SE in SAM
2012-09-06 09:52:19 +02:00
Frank Morgner
aa0647d9b4
nPA: added FIXME for EF.CardSecurity manipulation
2012-09-05 10:09:52 +02:00
Frank Morgner
f6e922222e
removed the currently unused getenc and setenc
...
These functions intended to do encryption and decryption respecting file
acls. This however was never implemented. Better use object properties
with appropriately setters and getters to realize this functionality.
2012-09-05 09:54:06 +02:00
Frank Morgner
c8da1f5213
nPA: allow the user to specify a EF.CardAccess
2012-09-05 09:47:02 +02:00