2004-06-16 20:59:59 +00:00
|
|
|
#
|
|
|
|
# PKCS15 r/w profile for Oberthur cards
|
|
|
|
#
|
|
|
|
cardinfo {
|
2010-01-15 14:08:54 +00:00
|
|
|
label = "SCM";
|
|
|
|
manufacturer = "Oberthur/OpenSC";
|
2004-06-16 20:59:59 +00:00
|
|
|
|
2010-01-15 14:08:54 +00:00
|
|
|
max-pin-length = 64;
|
|
|
|
min-pin-length = 4;
|
|
|
|
pin-encoding = ascii-numeric;
|
|
|
|
pin-pad-char = 0xFF;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
2010-03-17 16:40:12 +00:00
|
|
|
pkcs15 {
|
|
|
|
# Have a lastUpdate field in the EF(TokenInfo)?
|
|
|
|
do-last-update = no;
|
|
|
|
}
|
|
|
|
|
2004-06-16 20:59:59 +00:00
|
|
|
# Define reasonable limits for PINs and PUK
|
|
|
|
# Note that we do not set a file path or reference
|
|
|
|
# here; that is done dynamically.
|
|
|
|
PIN user-pin {
|
2010-01-15 14:08:54 +00:00
|
|
|
attempts = 5;
|
|
|
|
max-length = 64;
|
|
|
|
min-length = 4;
|
2010-01-27 18:07:14 +00:00
|
|
|
flags = case-sensitive, local, initialized, needs-padding;
|
|
|
|
reference = 0x81
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
PIN user-puk {
|
2010-01-15 14:08:54 +00:00
|
|
|
attempts = 5;
|
2010-01-27 18:07:14 +00:00
|
|
|
max-length = 64;
|
2010-01-15 14:08:54 +00:00
|
|
|
min-length = 4;
|
2010-01-27 18:07:14 +00:00
|
|
|
flags = case-sensitive, local, unblock-disabled, initialized, needs-padding, unblockingPin;
|
|
|
|
reference = 0x84
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
PIN so-pin {
|
2010-01-15 14:08:54 +00:00
|
|
|
auth-id = FF;
|
|
|
|
attempts = 3;
|
|
|
|
max-length = 64;
|
|
|
|
min-length = 4;
|
2010-01-27 18:07:14 +00:00
|
|
|
flags = case-sensitive, unblock-disabled, initialized, needs-padding, soPin;
|
2007-01-02 10:06:02 +00:00
|
|
|
reference = 4
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
2018-04-14 17:38:34 +00:00
|
|
|
# CHV5 used for Oberthur's specific access condition "PIN or SOPIN"
|
2004-06-16 20:59:59 +00:00
|
|
|
# Any value for this pin can given, when the OpenSC tools are asking for.
|
|
|
|
|
|
|
|
# Additional filesystem info.
|
|
|
|
# This is added to the file system info specified in the
|
|
|
|
# main profile.
|
|
|
|
filesystem {
|
2010-01-15 14:08:54 +00:00
|
|
|
DF MF {
|
2007-01-02 10:06:02 +00:00
|
|
|
ACL = *=CHV4;
|
2004-06-16 20:59:59 +00:00
|
|
|
|
|
|
|
DF OberthurAWP-AppDF {
|
|
|
|
ACL = *=NONE;
|
2010-01-15 14:08:54 +00:00
|
|
|
ACL = CREATE=CHV4, CRYPTO=NEVER, PIN-DEFINE=CHV4, PIN-RESET=CHV4;
|
2004-06-16 20:59:59 +00:00
|
|
|
file-id = 5011;
|
|
|
|
size = 40;
|
2010-01-21 09:41:40 +00:00
|
|
|
|
2010-01-15 14:08:54 +00:00
|
|
|
DF private-DF {
|
2004-06-16 20:59:59 +00:00
|
|
|
ACL = *=NEVER;
|
|
|
|
ACL = CREATE=CHV1, CRYPTO=CHV1, FILES=NONE, DELETE=NONE;
|
|
|
|
file-id = 9002;
|
|
|
|
size = 40;
|
|
|
|
|
|
|
|
# Private RSA keys
|
|
|
|
EF OberthurAWP-private-key-info {
|
2016-04-27 18:08:45 +00:00
|
|
|
ACL = WRITE=CHV1, UPDATE=CHV1, READ=NONE;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
EF template-private-key {
|
2010-01-15 14:08:54 +00:00
|
|
|
file-id = 3000;
|
2004-06-16 20:59:59 +00:00
|
|
|
type = internal-ef;
|
2010-01-21 09:41:40 +00:00
|
|
|
structure = 0xA3;
|
2004-06-16 20:59:59 +00:00
|
|
|
# READ acl used instead of DECRYPT/SIGN
|
2010-01-15 14:08:54 +00:00
|
|
|
ACL = UPDATE=CHV1, READ=CHV1;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
# Private DES keys
|
|
|
|
EF OberthurAWP-private-des-info {
|
2016-04-27 18:08:45 +00:00
|
|
|
ACL = WRITE=CHV1, UPDATE=CHV1, READ=NONE;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
EF template-private-des {
|
2010-01-15 14:08:54 +00:00
|
|
|
file-id = 4000;
|
2004-06-16 20:59:59 +00:00
|
|
|
type = internal-ef;
|
|
|
|
size = 24; # 192 bits
|
2018-04-14 17:38:34 +00:00
|
|
|
# READ acl used instead of DECRYPT/ENCRYPT/CHECKSUM
|
2004-06-16 20:59:59 +00:00
|
|
|
ACL = UPDATE=CHV1, READ=CHV1;
|
2010-01-15 14:08:54 +00:00
|
|
|
}
|
2004-06-16 20:59:59 +00:00
|
|
|
|
|
|
|
# Private data
|
2010-04-18 14:51:44 +00:00
|
|
|
EF OberthurAWP-privdata-info {
|
2016-04-27 18:08:45 +00:00
|
|
|
ACL = WRITE=CHV1, UPDATE=CHV1, READ=NONE;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
2010-04-18 14:51:44 +00:00
|
|
|
EF template-privdata {
|
2010-01-15 14:08:54 +00:00
|
|
|
file-id = 6000;
|
2004-06-16 20:59:59 +00:00
|
|
|
ACL = WRITE=CHV1, UPDATE=CHV1, READ=CHV1;
|
|
|
|
}
|
|
|
|
}
|
2010-01-21 09:41:40 +00:00
|
|
|
|
2004-06-16 20:59:59 +00:00
|
|
|
DF public-DF {
|
|
|
|
ACL = CREATE=NONE, CRYPTO=NONE, FILES=NONE, DELETE=NONE;
|
|
|
|
file-id = 9001;
|
|
|
|
size = 80;
|
|
|
|
|
|
|
|
# Certificate
|
|
|
|
EF OberthurAWP-certificate-info {
|
|
|
|
ACL = WRITE=NONE, UPDATE=NONE, READ=NONE, ERASE=NONE;
|
|
|
|
}
|
|
|
|
EF template-certificate {
|
|
|
|
file-id = 2000;
|
|
|
|
ACL = WRITE=NONE, UPDATE=NONE, READ=NONE, ERASE=NONE;
|
2010-01-15 14:08:54 +00:00
|
|
|
}
|
2004-06-16 20:59:59 +00:00
|
|
|
|
|
|
|
#Public Key
|
|
|
|
EF OberthurAWP-public-key-info {
|
|
|
|
ACL = WRITE=NONE, UPDATE=NONE, READ=NONE, ERASE=NONE;
|
|
|
|
}
|
2010-01-15 14:08:54 +00:00
|
|
|
EF template-public-key {
|
|
|
|
file-id = 1000;
|
2004-06-16 20:59:59 +00:00
|
|
|
type = internal-ef;
|
2010-01-21 09:41:40 +00:00
|
|
|
structure = 0xA1;
|
2010-01-15 14:08:54 +00:00
|
|
|
ACL = *=NONE;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
# Public DES keys
|
|
|
|
EF OberthurAWP-public-des-info {
|
|
|
|
ACL = WRITE=NONE, UPDATE=NONE, READ=NONE, ERASE=NONE;
|
|
|
|
}
|
|
|
|
EF template-public-des {
|
2010-01-15 14:08:54 +00:00
|
|
|
file-id = 7000;
|
2004-06-16 20:59:59 +00:00
|
|
|
type = internal-ef;
|
|
|
|
size = 24; # 192 bits
|
|
|
|
ACL = *=NONE;
|
2010-01-15 14:08:54 +00:00
|
|
|
}
|
2004-06-16 20:59:59 +00:00
|
|
|
|
|
|
|
# Public data
|
2010-03-22 14:17:27 +00:00
|
|
|
EF OberthurAWP-data-info {
|
2004-06-16 20:59:59 +00:00
|
|
|
ACL = WRITE=NONE, UPDATE=NONE, READ=NONE, ERASE=NONE;
|
|
|
|
}
|
2010-03-22 14:17:27 +00:00
|
|
|
EF template-data {
|
2010-01-15 14:08:54 +00:00
|
|
|
file-id = 5000;
|
2004-06-16 20:59:59 +00:00
|
|
|
ACL = *=NONE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
EF OberthurAWP-token-info {
|
2010-03-17 16:40:12 +00:00
|
|
|
file-id = 1000;
|
2004-06-16 20:59:59 +00:00
|
|
|
size = 36;
|
2010-03-17 16:40:12 +00:00
|
|
|
ACL = WRITE=CHV4, UPDATE=CHV4, READ=NONE, ERASE=NEVER;
|
2007-01-02 10:06:02 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
EF OberthurAWP-puk-file {
|
2010-03-17 16:40:12 +00:00
|
|
|
file-id = 2000;
|
2007-01-02 10:06:02 +00:00
|
|
|
size = 16;
|
2010-03-17 16:40:12 +00:00
|
|
|
ACL = WRITE=NEVER, UPDATE=CHV4, READ=NONE, ERASE=NEVER;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
EF OberthurAWP-container-list {
|
|
|
|
file-id = 3000;
|
|
|
|
structure = linear-variable;
|
|
|
|
size = 20;
|
2010-03-17 16:40:12 +00:00
|
|
|
record-length = 141;
|
2010-03-17 16:45:02 +00:00
|
|
|
ACL = WRITE=NONE, UPDATE=NONE, READ=NONE, ERASE=NONE;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
EF OberthurAWP-public-list {
|
2010-03-17 16:40:12 +00:00
|
|
|
file-id = 4000;
|
2004-06-16 20:59:59 +00:00
|
|
|
size = 250;
|
2010-03-17 16:40:12 +00:00
|
|
|
ACL = *=NONE, ERASE=NEVER;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
EF OberthurAWP-private-list {
|
2010-03-17 16:40:12 +00:00
|
|
|
file-id = 5000;
|
2004-06-16 20:59:59 +00:00
|
|
|
size = 125;
|
2010-03-17 16:40:12 +00:00
|
|
|
ACL = WRITE=CHV1, UPDATE=CHV1, READ=NONE, ERASE=NEVER;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-01-15 14:08:54 +00:00
|
|
|
DF PKCS15-AppDF {
|
|
|
|
ACL = *=CHV4, FILES=NONE;
|
2004-06-16 20:59:59 +00:00
|
|
|
size = 20;
|
|
|
|
|
2010-01-15 14:08:54 +00:00
|
|
|
EF PKCS15-ODF {
|
|
|
|
size = 512;
|
|
|
|
}
|
|
|
|
|
|
|
|
EF PKCS15-AODF {
|
|
|
|
size = 512;
|
|
|
|
}
|
|
|
|
|
|
|
|
EF PKCS15-CDF {
|
|
|
|
size = 3072;
|
|
|
|
}
|
|
|
|
|
|
|
|
EF PKCS15-PrKDF {
|
|
|
|
size = 1024;
|
|
|
|
}
|
|
|
|
|
|
|
|
EF PKCS15-PuKDF {
|
|
|
|
size = 1024;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|
2010-01-15 14:08:54 +00:00
|
|
|
EF PKCS15-DODF {
|
|
|
|
size = 512;
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
}
|
2010-01-15 14:08:54 +00:00
|
|
|
}
|
2004-06-16 20:59:59 +00:00
|
|
|
}
|
|
|
|
|