OpenPACE: eac/pace.h Source File

OpenPACE

pace.h
Go to the documentation of this file.
1 /*
2 * Copyright (c) 2010-2012 Frank Morgner and Dominik Oepen
3 *
4 * This file is part of OpenPACE.
5 *
6 * OpenPACE is free software: you can redistribute it and/or modify it under
7 * the terms of the GNU General Public License as published by the Free
8 * Software Foundation, either version 3 of the License, or (at your option)
9 * any later version.
10 *
11 * OpenPACE is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
13 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
14 * details.
15 *
16 * You should have received a copy of the GNU General Public License along with
17 * OpenPACE. If not, see <http://www.gnu.org/licenses/>.
18 *
19 * Additional permission under GNU GPL version 3 section 7
20 *
21 * If you modify this Program, or any covered work, by linking or combining it
22 * with OpenSSL (or a modified version of that library), containing
23 * parts covered by the terms of OpenSSL's license, the licensors of
24 * this Program grant you additional permission to convey the resulting work.
25 * Corresponding Source for a non-source form of such a combination shall include
26 * the source code for the parts of OpenSSL used as well as that of the
27 * covered work.
28 *
29 * If you modify this Program, or any covered work, by linking or combining it
30 * with OpenSC (or a modified version of that library), containing
31 * parts covered by the terms of OpenSC's license, the licensors of
32 * this Program grant you additional permission to convey the resulting work.
33 * Corresponding Source for a non-source form of such a combination shall include
34 * the source code for the parts of OpenSC used as well as that of the
35 * covered work.
36 */
37
55 #ifndef PACE_H_
56 #define PACE_H_
57
58 #include "eac.h"
59 #include <openssl/bn.h>
60 #include <openssl/buffer.h>
61
62 #ifdef __cplusplus
63 extern "C" {
64 #endif
65
67 enum s_type {
70 PACE_MRZ = 1,
72 PACE_CAN,
75 PACE_PIN,
78 PACE_PUK,
81 PACE_RAW,
83 PACE_SEC_UNDEF
84 };
85
87 typedef struct pace_sec {
89 enum s_type type;
91 BUF_MEM *mem;
93 BUF_MEM *encoded;
94 } PACE_SEC;
95
108 void PACE_SEC_clear_free(PACE_SEC * s);
118 PACE_SEC *
119 PACE_SEC_new(const char *sec, size_t sec_len, enum s_type type);
120
130 int
131 PACE_SEC_print_private(BIO *out, const PACE_SEC *sec, int indent);
149 BUF_MEM * PACE_STEP1_enc_nonce(const EAC_CTX * ctx, const PACE_SEC * pi);
161 int PACE_STEP2_dec_nonce(const EAC_CTX * ctx, const PACE_SEC * pi,
162 const BUF_MEM * enc_nonce);
174 BUF_MEM *
175 PACE_STEP3A_generate_mapping_data(const EAC_CTX * ctx);
186 int
187 PACE_STEP3A_map_generator(const EAC_CTX * ctx, const BUF_MEM * in);
197 BUF_MEM * PACE_STEP3B_generate_ephemeral_key(EAC_CTX * ctx);
208 int
209 PACE_STEP3B_compute_shared_secret(const EAC_CTX * ctx, const BUF_MEM * in);
219 int PACE_STEP3C_derive_keys(const EAC_CTX *ctx);
231 BUF_MEM * PACE_STEP3D_compute_authentication_token(const EAC_CTX *ctx,
232 const BUF_MEM *pub);
244 int PACE_STEP3D_verify_authentication_token(const EAC_CTX * ctx,
245 const BUF_MEM * token);
246
250 #ifdef __cplusplus
251 }
252 #endif
253 #endif
eac.h
Interface for Extended Access Control.
PACE_STEP3A_map_generator
int PACE_STEP3A_map_generator(const EAC_CTX *ctx, const BUF_MEM *in)
Map to the ephemeral domain parameters.
PACE_SEC_clear_free
void PACE_SEC_clear_free(PACE_SEC *s)
Free a PACE secret.
PACE_STEP3B_generate_ephemeral_key
BUF_MEM * PACE_STEP3B_generate_ephemeral_key(EAC_CTX *ctx)
Generate a keypair for key agreement.
PACE_STEP3A_generate_mapping_data
BUF_MEM * PACE_STEP3A_generate_mapping_data(const EAC_CTX *ctx)
Generate a mapping data to perform the mapping to ephemeral domain parameters.
PACE_STEP3B_compute_shared_secret
int PACE_STEP3B_compute_shared_secret(const EAC_CTX *ctx, const BUF_MEM *in)
Compute the shared secret for key agreement.
PACE_CAN
@ PACE_CAN
CAN is the Card access number printed on the card.
Definition: pace.h:72
pace_sec::encoded
BUF_MEM * encoded
Encoded secret.
Definition: pace.h:93
PACE_SEC_print_private
int PACE_SEC_print_private(BIO *out, const PACE_SEC *sec, int indent)
Print PACE_SEC object including private secret.
s_type
s_type
Type of the secret.
Definition: pace.h:67
PACE_MRZ
@ PACE_MRZ
MRZ is the Machine Readable Zone, printed on the card, encoding the personal information of the user.
Definition: pace.h:70
pace_sec::mem
BUF_MEM * mem
Raw secret.
Definition: pace.h:91
PACE_STEP3C_derive_keys
int PACE_STEP3C_derive_keys(const EAC_CTX *ctx)
Derives encryption and authentication keys.
eac_ctx
Context for the Extended Access Control protocol.
Definition: eac.h:342
pace_sec
Shared secret for PACE.
Definition: pace.h:87
PACE_SEC_new
PACE_SEC * PACE_SEC_new(const char *sec, size_t sec_len, enum s_type type)
Create and initialize a new PACE secret.
PACE_STEP3D_compute_authentication_token
BUF_MEM * PACE_STEP3D_compute_authentication_token(const EAC_CTX *ctx, const BUF_MEM *pub)
Compute the authentication token from domain parameters and public key.
PACE_STEP3D_verify_authentication_token
int PACE_STEP3D_verify_authentication_token(const EAC_CTX *ctx, const BUF_MEM *token)
Verifies an authentication token.
PACE_SEC
struct pace_sec PACE_SEC
Shared secret for PACE.
PACE_STEP2_dec_nonce
int PACE_STEP2_dec_nonce(const EAC_CTX *ctx, const PACE_SEC *pi, const BUF_MEM *enc_nonce)
Decrypt the nonce from the other party.
PACE_PIN
@ PACE_PIN
PIN is the Personal Identification Number, a secret known only to the user and not printed on the car...
Definition: pace.h:75
PACE_STEP1_enc_nonce
BUF_MEM * PACE_STEP1_enc_nonce(const EAC_CTX *ctx, const PACE_SEC *pi)
Generates and encrypts a nonce.
pace_sec::type
enum s_type type
Type of the secret.
Definition: pace.h:89
PACE_RAW
@ PACE_RAW
This type of secret is not defined in BSI TR-03110. We use it as a generic type, so we can use PACE i...
Definition: pace.h:81
PACE_SEC_UNDEF
@ PACE_SEC_UNDEF
Undefined type, if nothing else matches.
Definition: pace.h:83
PACE_PUK
@ PACE_PUK
PUK is the Personal Unblocking key. This type of secret is used when the card is suspended due to too...
Definition: pace.h:78