Commit Graph

870 Commits

Author SHA1 Message Date
Frank Morgner
f48d45b16c fixed bug in iso sm driver 2013-02-09 23:43:26 +01:00
Frank Morgner
9340c66b75 check for NULL pointer 2013-02-09 23:43:12 +01:00
Dominik
8b3dd50784 Fix opensc submodule 2013-02-07 21:54:14 +01:00
Frank Morgner
4fd23d08fb fixed recursive write of EFs 2013-02-04 23:31:02 +01:00
Frank Morgner
a6a10d0b3e fixed special functions 2013-02-04 23:08:00 +01:00
Frank Morgner
d98f4e57c9 added verification of age/validity/community 2013-02-03 22:27:02 +01:00
Frank Morgner
9f6ffc2fad handling special Le's for encryption in iso SM driver 2013-02-01 01:18:36 +01:00
Frank Morgner
e3947061c4 selectig eid after EAC 2013-02-01 01:18:36 +01:00
Frank Morgner
fae2b5441f fixed referencing EAC_CTX in TA and CA 2013-01-31 22:26:56 +01:00
Frank Morgner
e01eae9ce3 added read and write of data groups
adds read_binary_rec and write_binary_rec to scutil.h
2013-01-29 15:51:35 +01:00
Frank Morgner
2905b067e5 fixed typo 2013-01-29 09:47:47 +01:00
Frank Morgner
6947ccb8be added missing documentation 2012-12-17 21:53:50 +01:00
Frank Morgner
cff11a0b31 added overview about TA/CA to documentation 2012-12-16 04:26:30 +01:00
Frank Morgner
d479420463 include OpenSC as submodule 2012-12-16 04:09:25 +01:00
Frank Morgner
fe155bb002 fixed generation of documentation 2012-12-11 22:56:48 +01:00
Frank Morgner
e9e5c7668b use OpenSC's hooks to wrap and unwrap SM APDUs
sm_transmit_apdu is obsolete. libnpa and OpenSC can be used in parallel
now. libnpa modifies OpenSC's card handle to add SM on the fly to any
OpenSC command. This, for example, allows PKCS#XX commands in a SM
channel established by libnpa.
2012-12-09 23:15:51 +01:00
Frank Morgner
758fe2b99f nPA: fixed resume PIN command
PACE with CAN followed by PACE with PIN in SM failed, because the
eac_ctx holding the SM context was always cleared at the beginning of
the second PACE run.
2012-12-08 20:50:07 +01:00
Frank Morgner
c58aed6896 fixed printing of EAC CTX 2012-12-08 00:17:32 +01:00
Frank Morgner
de1378f780 always declare extended length capabilities
allows usage of an unpatched version of OpenPACE. libnpa now works with
the nPA using the default card driver.
2012-11-21 19:45:59 +01:00
Frank Morgner
77a52cc8e9 adapted to changes of OpenSC master
Now works with the stupid changes of OpenSC made in
41861e42b01539856b31f758dfde9ba53749eaaa
2012-11-21 19:45:59 +01:00
Frank Morgner
c6f61aa3eb adapted to changes of OpenPACE
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6 adapted to latest changes of openpace
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
e8528c8297 disable check of validity period for testing 2012-11-01 07:32:52 +01:00
Frank Morgner
a00f305f2a use default CHAT for testing 2012-11-01 07:25:49 +01:00
Frank Morgner
2b472133fd for EAC, use terminal's CHAT by default 2012-11-01 07:24:14 +01:00
Frank Morgner
f683129a51 comprehensive checking for help2man and gengetopt 2012-10-26 22:08:56 +02:00
Frank Morgner
cc3095a2f0 comprehensive checking for help2man and gengetopt 2012-10-26 22:04:24 +02:00
Frank Morgner
38f2f363bf comprehensive checking for help2man 2012-10-26 21:55:42 +02:00
Frank Morgner
5ab760e0c0 let MSE:Set AT distinguish between tags 83, 84 2012-10-12 11:48:22 +02:00
Frank Morgner
fd4ed5162c selecting MF on reset and power up 2012-10-11 22:22:57 +02:00
Frank Morgner
80f86b81ed fixed wrong encoding of protected Le 2012-10-10 22:02:59 +02:00
Frank Morgner
4cba1d8ee2 added script to test vicc with npa-tool 2012-10-10 22:02:59 +02:00
Frank Morgner
a08ce27552 added calculation of longest encrypted short-length APDU 2012-10-10 22:02:59 +02:00
Frank Morgner
df00bca2f0 adapted to changes of openpace in 91d6ee1ec80f6... 2012-10-10 22:02:59 +02:00
Frank Morgner
801e80a350 nPA: added --cvca parameter 2012-10-10 22:02:59 +02:00
Frank Morgner
296db65bc2 updated help for --disable-checks 2012-10-10 22:02:59 +02:00
Frank Morgner
1edbc97845 fixed memory leaks 2012-10-10 22:02:59 +02:00
Frank Morgner
e99979fab1 debug the result from CA's general authenticate 2012-10-10 22:02:59 +02:00
Frank Morgner
be19c06e51 fixed short length SM APDUs (especially case 2) 2012-10-10 22:02:59 +02:00
Frank Morgner
80091a6997 fixed Le for get challenge 2012-10-10 22:02:59 +02:00
Frank Morgner
af9b2bf07d nPA: using case 3 apdu for verify 2012-10-10 22:02:59 +02:00
Frank Morgner
6a36a8f733 fixed CLA of PACE's last general authenticate 2012-10-10 22:02:59 +02:00
Frank Morgner
203f4ac5b2 nPA: updated CLI information regarding CAR 2012-10-10 22:02:59 +02:00
Frank Morgner
25b75d7ffe ignoring CVCA certificate for --disable-checks
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
2012-10-10 22:02:59 +02:00
Frank Morgner
d9ce98765f fixed PACE_STEP3D_verify_authentication_token 2012-10-10 22:02:59 +02:00
Frank Morgner
02299c9036 nPA: initialize ca without specifying protocol 2012-10-10 22:02:59 +02:00
Frank Morgner
7985b7e83c ALGO_MAPPING: added oids for TA, CA, RI and PACE 2012-10-10 22:02:59 +02:00
Frank Morgner
c92d923fc8 nPA: removed --ca-pubkey command line option
The public key is extracted from the EF.CardSecurity instead.
2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e nPA: added option to disable validity period check 2012-10-10 22:02:59 +02:00
Frank Morgner
765d284bc4 Fixes for MSE:Set AT in TA and CA
- TA: fixed p1, p2 and include ephemeral pubkey and OID
- CA: include OID and leave out key reference

Currently it is hard to distinguish between the CA key and the
chip-individual key using the key references in
EF.CardSecurity/EF.CardAccess. The first (default) key in these files
should, however, be the CA key.
2012-10-10 22:01:36 +02:00