08cef866f7Initial release of pace-gui, a small GUI for pace-tool
oepen
2010-06-07 14:50:22 +00:00
0eb3279e58updated checksums, install files for recipes. updated log files for 0.6.1
frankmorgner
2010-06-05 22:10:45 +00:00
e02e2abdfb- dropped pace_transmit_apdu in favour of a solution with sm_transmit_apdu. post_transmit and pre_transmit can be used to perform actions before encrypting/decrypting a sm apdu (such as incrementing the ssc for pace). - fixed ssc problems. encrypted communication with more than one apdu (e.g. resuming the pin) is now working. - fixed uninitialized pointer in sm_decrypt
frankmorgner
2010-06-05 14:34:50 +00:00
c88e4892acfixed uninitialized pointer which caused segfault on decryption.
frankmorgner
2010-06-04 21:34:25 +00:00
ee1a009585fixed segfault if ef.cardaccess is not readable
frankmorgner
2010-06-04 19:05:09 +00:00
b5dd649318Explicitly enable PC/SC support in the OpenSC recipe
oepen
2010-05-31 18:08:50 +00:00
f7f7e2d0b8Added bitbake recipe for OpenSC. Needs local copy of le0.patch.
oepen
2010-05-29 21:44:49 +00:00
e86a3b94d0Added bitbake recipes for the latest versions of pcsc-lite and ccid
oepen
2010-05-29 20:58:28 +00:00
21167cc8f9Added a bitbake recipe for the latest version of ccid including pace-tool. WARNING: Depends on recipes that are not part of openembedded (yet), like opensc and OpenSSL with OpenPACE patch.
oepen
2010-05-28 15:34:57 +00:00
1c53096603bugfix: using libtool for installation
frankmorgner
2010-05-26 22:51:19 +00:00
7fd92afc4fremoved some messages, when less verbose. fixed little endian problem when parsing input buffer of EstablishPACEChannel.
frankmorgner
2010-05-26 20:32:29 +00:00
34b91882dafixed class byte generation for sm apdu
frankmorgner
2010-05-20 19:26:16 +00:00
72e4434fb4- sm_transmit_apdu doesn't check SWs anymore - not throwing error for sw=63XX in mse:set at
frankmorgner
2010-05-20 18:26:56 +00:00
894d5be379- using short apdus for mse:set at and generic authenticate. to make it work with the sm implementation - added parameter oldpacectx to EstablishPACEChannel to allow a a new PACE connection inside an exitsting PACE connection (the output buffer of the latter connection must be provided since it stores the ef.cardaccess) - added functionality to ask for the secret in pace_reset_retry_counter - added macro pace_change_pin - SWs were stored at the wrong place of the output buffer from EstablishPACEChannel, fixed. - split up functionality of pace_test into multiple functions - added new command line option to pace-tool to resume the pin. resuming the pin is not working, yet.
frankmorgner
2010-05-20 08:17:38 +00:00
d0a6668f58Changed EXPLICIT tagging of CHAT and auxiliary authenticated data to IMPLICIT tagging
oepen
2010-05-18 11:39:25 +00:00
c26c4273a9- Added handling for output buffer of EstablishPACEChannel, but CARs are still missing - Handed over code for handling of IV and SSC for PACE to OpenPACE
frankmorgner
2010-05-16 18:53:05 +00:00
496cc54c6fbe less restrictive in ./configure. better output of configuration details
frankmorgner
2010-05-09 08:34:16 +00:00
e0cf5e270ffixed include in pace.c. switched to autotools
frankmorgner
2010-05-07 11:50:54 +00:00
7649e582a1split up utils into stuff for program and sc handling
frankmorgner
2010-05-05 14:38:04 +00:00
fd6d201536cleaned up pace.c and moved test_pace to pace-tool.c
frankmorgner
2010-05-04 21:01:40 +00:00
193e93ef5fopenpace is now a hard dependancy for pace-tool. ccid does not yet depend on pace, since the USB interface to pace is not yet defined.
frankmorgner
2010-05-04 20:16:06 +00:00
170ec3c703cleaned up command line options of pace-tool and made it independant from ccid
frankmorgner
2010-05-04 20:03:54 +00:00
fcfbca19d7bugfix: initializing apdu in pace_gen_auth. bin_log now checks input data.
frankmorgner
2010-05-04 08:07:20 +00:00
93622f6486changed length of read binary apdu to support acr 122
frankmorgner
2010-05-04 07:57:13 +00:00
6332016b46put static pace functionality into the new program pace-tool
frankmorgner
2010-05-03 19:52:41 +00:00
52626eb374the number of remaining retries is a warning from the card, not a fatal error
frankmorgner
2010-05-03 13:46:44 +00:00
4ebf93e51busing proper type for getline result
frankmorgner
2010-04-29 07:33:45 +00:00
06375ec693added support for changing CAN and PIN for PACE
frankmorgner
2010-04-28 13:14:40 +00:00
fdc400b911- sm will yield error when the class byte indicates a sm apdu and pace will simply transmit the apdu without encrypting/authenticating it. - fixed building process when compiling without pace
frankmorgner
2010-04-27 20:00:42 +00:00
b40ec45e5aadded option to scan for available readers
frankmorgner
2010-04-16 14:08:13 +00:00
5b6496a6c6added header file for pace library functions
frankmorgner
2010-04-15 20:03:09 +00:00
7e0b4c1594- added information about opensc - using sc_transmit_apdu instead of my_transmit_apdu. fixing the opensc error is the better solution than implementing it twice (see http://www.opensc-project.org/opensc/ticket/209)
frankmorgner
2010-04-15 18:37:03 +00:00
f0730c3626updated information
frankmorgner
2010-04-15 07:41:15 +00:00
35f75abe1d- Fixed error when testing pace without card - Testing pace allows now to choose the type of the secret (mrz, pin, can, puk). The secret can be given as commandline option or interactively. - Cleaned prompt for getting the password - Fixed error when inserting an empty password - When PACE is successfully finished, APDUs for testing can be given interactively
frankmorgner
2010-04-15 07:37:32 +00:00
b798a6e3a2- completed mac verification. sm with pace is now fully functional. - made pace_test more fault tolerant.
frankmorgner
2010-04-13 21:06:17 +00:00
985590c3a8- decryption of sm apdu now working. verification of mac still missing.
frankmorgner
2010-04-12 21:22:39 +00:00
535a2ea9f1fixed various memory leaks and potential segfaults
frankmorgner
2010-04-12 19:54:43 +00:00
d8ababbf96- protocol nid in pace_sm_ctx is not needed any longer due to the changes of OpenPACE
frankmorgner
2010-04-12 14:26:23 +00:00
f84d7f1752bugfixes: - sm.c: fixed mac data padding, when sending sm apdu without data. - pace.c: for iv calculation ecb is used instead of cbc - pace.c: fixed ssc incrementation
frankmorgner
2010-04-12 14:04:08 +00:00
835fa61102- trying new apdu to reset retry counter in pace_test - added pace wrapper for sm_transmit_apdu which automatically increments the ssc
frankmorgner
2010-04-12 12:09:40 +00:00
3a8bf5f09badded missing include
frankmorgner
2010-04-12 10:31:24 +00:00
888c7d7ab6added code for reading cardsecurity
frankmorgner
2010-04-12 07:34:47 +00:00
e752d51396- reverted changes from last commit
frankmorgner
2010-04-12 07:23:13 +00:00
c01c85e7ec- added more debugging - bugfix: header of sm apdu is authenticated instead of the original apdu
frankmorgner
2010-04-12 07:18:35 +00:00
ab13c8ffb7bugfix: fetching unhandled error in update_iv
frankmorgner
2010-04-11 21:06:28 +00:00
b3b9ad6aeamade bin_log more verbose
frankmorgner
2010-04-11 20:49:48 +00:00
90efc82314Bugfixes: - ssc is a BIGNUM, since its size can be up to 16 bytes (not 16 bits as before) - protected le is now encoded as octet string (not as unsigned integer anymore) - sc_format_asn1_entry was fet with wrong pointers (lebuf instead of *lebuf and formatted_data instead of *formatted_data
frankmorgner
2010-04-11 20:31:28 +00:00
c8cd403ee9made sm code independant from openssl
frankmorgner
2010-04-10 20:39:32 +00:00
495149f265- pace.c: removed unused variable ssc - pace.c: bugfix: don't increment ssc when resetting it. - sm.c/.h: wrote wrapper sm_transmit_apdu - sm.c: removed sm error handling, should be done by sc_check_sw - sm.c/ccid.c/pace.c: added qualifier "static" to local functions
frankmorgner
2010-04-10 18:16:09 +00:00
8905bdec72added sw checking for sm
frankmorgner
2010-04-10 17:00:00 +00:00
6d0cc5e908added missing return buffer for select of CardSecurity
frankmorgner
2010-04-10 15:12:37 +00:00
cbc4dda0ed- sm.c (sm_encrypt) fixed header of sm apdu - pace.c (EstablishPACEChannel) Fixed initialisation of authentication_ctx. (pace_test) Fixed usage of SC_TEST_RET and initialisation of select apdu for EF.CardSecurity.
frankmorgner
2010-04-10 14:53:45 +00:00
62e48e2a7c- Work in progress: Almost finished (hopefully) flexible sm implementation (untested). struct sm_ctx needs external cipher and authentication implementations. Here only routines for encryption/decryption/authentication with PACE are given.
frankmorgner
2010-04-09 20:36:32 +00:00
9d573d0398integrated SM into pace
frankmorgner
2010-04-01 05:52:37 +00:00
ae3e7ae862- added untested function to decrypt sm - function cipher now always disables automatic padding
frankmorgner
2010-03-31 21:58:49 +00:00
2a1afd8fd2- Added an untested SM implementation, currently only with encryption - Added utils from OpenPACE
frankmorgner
2010-03-29 19:53:11 +00:00
7090788945adapted latest changes of OpenPACE
frankmorgner
2010-03-22 14:42:43 +00:00
faae949895bugfix: corrected types of fields from ASN1_INTEGER to ASN1_OCTET_STRING
frankmorgner
2010-03-15 18:34:47 +00:00
561cdfd694- adopted the latest changes of OpenPACE - bugfix: created receive buffer before sending general authenticate apdus - added more debug output
frankmorgner
2010-03-15 15:01:01 +00:00
2bc8c9b512using specifications from TR-03110 2.01 as default (as done by test cards)
frankmorgner
2010-03-09 19:30:29 +00:00
a8887b1f03bugfix: building with apdu.c apdu.h
frankmorgner
2010-03-09 07:01:19 +00:00
e13b92b003- bugfix: general authenticate response data is now encapsulated in a dynamic data object - added more debug messages - bugfix: get_ef_card_access didn't fetch the whole file - bugfix: set mse set at apdu type to case 3 - bugfix: only send the plain value (without tag/length) of the PACE_MSE_SET_AT object - bugfix: fixed general authenticate cla byte and set apdu type to case 4 - sanity checks in sc_transmit_apdu forbid the required apdu format of general authenticate so it had to be reimplemented in my_transmit_apdu. apdu.c/apdu.h are mainly copied from opensc.
frankmorgner
2010-03-08 22:16:47 +00:00
0aab9bb184- fixed includes - fixed return value from pace_test if NO_PACE is defined
frankmorgner
2010-03-05 22:35:40 +00:00