package "npa-tool"
purpose "Access the German electronic identity card (neuer Personalausweis, nPA)"

option "info"           i
    "Print available readers and drivers."
    flag off
option "reader"         r
    "Number of the PC/SC reader to use (-1 for autodetect)"
    int
    default="-1"
    optional
option "verbose"    v
    "Use (several times) to be more verbose"
    multiple
    optional
option "env"            -
    "Whether to use environment variables PIN, PUK, CAN, MRZ and NEWPIN. You may want to clean your environment before enabling this."
    flag off

section "Secrets for establishing the secure PACE channel to the card"
option "pin"            p
    "Run PACE with (transport) eID-PIN"
    string
    argoptional
    optional
option "puk"            u
    "Run PACE with PUK"
    string
    argoptional
    optional
option "can"            c
    "Run PACE with CAN"
    string
    argoptional
    optional
option "mrz"            m
    "Run PACE with MRZ (insert MRZ without newlines)"
    string
    argoptional
    optional

section "Terminal Authentication"
option "cv-certificate" C
    "Card Verifiable Certificate to create a certificate chain. Can be used multiple times (order is important)."
    string
    typestr="FILENAME"
    optional
    multiple
option "cert-desc"      -
    "Certificate description to use for Terminal Authentication"
    string
    typestr="HEX_STRING"
    optional
option "chat"           -
    "Card holder authorization template to use (default is terminal's CHAT)"
    string
    typestr="HEX_STRING"
    optional
option "auxiliary-data" A
    "Terminal's auxiliary data."
    string
    typestr="HEX_STRING"
    optional
option "private-key"    P
    "Terminal's private key."
    string
    typestr="FILENAME"
    optional

section "PIN management"
option "new-pin"        N
    "Install a new PIN"
    string
    optional
option "resume"         R
    "Resume eID-PIN (uses CAN to activate last retry)"
    flag off
option "unblock"        U
    "Unblock PIN (uses PUK to activate three more retries)"
    flag off

section "Read and Write Data Groups"
option "read-dg1"       -
    "Read DG 1   (Document Type)"
    flag off
option "read-dg2"       -
    "Read DG 2   (Issuing State)"
    flag off
option "read-dg3"       -
    "Read DG 3   (Date of Expiry)"
    flag off
option "read-dg4"       -
    "Read DG 4   (Given Names)"
    flag off
option "read-dg5"       -
    "Read DG 5   (Family Names)"
    flag off
option "read-dg6"       -
    "Read DG 6   (Religious/Artistic Name)"
    flag off
option "read-dg7"       -
    "Read DG 7   (Academic Title)"
    flag off
option "read-dg8"       -
    "Read DG 8   (Date of Birth)"
    flag off
option "read-dg9"       -
    "Read DG 9   (Place of Birth)"
    flag off
option "read-dg10"      -
    "Read DG 10  (Nationality)"
    flag off
option "read-dg11"      -
    "Read DG 11  (Sex)"
    flag off
option "read-dg12"      -
    "Read DG 12  (Optional Data)"
    flag off
option "read-dg13"      -
    "Read DG 13"
    flag off
option "read-dg14"      -
    "Read DG 14"
    flag off
option "read-dg15"      -
    "Read DG 15"
    flag off
option "read-dg16"      -
    "Read DG 16"
    flag off
option "read-dg17"      -
    "Read DG 17  (Normal Place of Residence)"
    flag off
option "read-dg18"      -
    "Read DG 18  (Community ID)"
    flag off
option "read-dg19"      -
    "Read DG 19  (Residence Permit I)"
    flag off
option "read-dg20"      -
    "Read DG 20  (Residence Permit II)"
    flag off
option "read-dg21"      -
    "Read DG 21  (Optional Data)"
    flag off
option "write-dg17"      -
    "Write DG 17 (Normal Place of Residence)"
    string
    typestr="HEX_STRING"
    optional
option "write-dg18"      -
    "Write DG 18 (Community ID)"
    string
    typestr="HEX_STRING"
    optional
option "write-dg19"      -
    "Write DG 19 (Residence Permit I)"
    string
    typestr="HEX_STRING"
    optional
option "write-dg20"      -
    "Write DG 20 (Residence Permit II)"
    string
    typestr="HEX_STRING"
    optional
option "write-dg21"      -
    "Write DG 21 (Optional Data)"
    string
    typestr="HEX_STRING"
    optional

section "Special options, not always useful"
option "break"          b
    "Brute force PIN, CAN or PUK"
    flag off
option "translate"      t
    "File with APDUs to send through the secure channel"
    string
    typestr="FILENAME"
    default="stdin"
    optional
option "tr-03110v201"    -
    "Force compliance to BSI TR-03110 version 2.01"
    flag off
option "disable-checks"   -
    "Disable checking fly-by-data and validity period of CV certifcates"
    flag off

text "
Report bugs to @PACKAGE_BUGREPORT@

Written by Frank Morgner <morgner@informatik.hu-berlin.de>"