AuthentIC: add profile

git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@5007 c6295689-39f2-0310-b995-f0e70906c6a9
2010-12-30 14:42:30 +00:00 · 2010-12-30 14:42:30 +00:00 · d644441f5c
parent 1a58c429cb
commit d644441f5c
1 changed files with 139 additions and 0 deletions
--- a/src/pkcs15init/authentic.profile
+++ b/src/pkcs15init/authentic.profile
@ -0,0 +1,139 @@
+#
+# PKCS15 r/w profile for Oberthur cards
+#
+cardinfo {
+    label       = "AuthentIC.v3";
+    manufacturer    = "Oberthur COSMO.v7";
+
+    max-pin-length    = 4;
+    min-pin-length    = 4;
+    pin-encoding    = ascii-numeric;
+    pin-pad-char    = 0xFF;
+}
+
+pkcs15 {
+    # Put certificates into the CDF itself?
+    direct-certificates    = no;
+    # Put the DF length into the ODF file?
+    encode-df-length    = no;
+    # Have a lastUpdate field in the EF(TokenInfo)?
+    do-last-update        = yes;
+}
+
+option ecc {
+  macros {
+    odf-size        = 96;
+    aodf-size       = 300;
+    cdf-size        = 3000;
+    prkdf-size      = 6700;
+    pukdf-size      = 2300;
+    dodf-size       = 3000;
+    skdf-size       = 3000;
+  }
+}
+
+
+# Define reasonable limits for PINs and PUK
+# Note that we do not set a file path or reference
+# here; that is done dynamically.
+PIN user-pin {
+    attempts            = 5;
+    max-length          = 4;
+    min-length          = 4;
+    flags                = 0x10; # initialized
+    reference           = 193;
+    sen_reference        = 7;
+}
+PIN so-pin {
+    auth-id = FF;
+    attempts    = 5;
+    max-length  = 4;
+    min-length  = 4;
+    flags   = 0xB2;
+    reference = 2
+}
+
+# CHV5 used for Oberthur's specifique access condition "PIN or SOPIN"
+# Any value for this pin can given, when the OpenSC tools are asking for.
+
+# Additional filesystem info.
+# This is added to the file system info specified in the
+# main profile.
+filesystem {
+    DF MF {
+        ACL = *=CHV4;
+        path    = 3F00;
+        type    = DF;
+
+        # This is the DIR file
+        EF DIR {
+            type    = EF;
+            file-id = 2F00;
+            size    = 128;
+            acl     = *=NONE;
+        }
+
+        DF PKCS15-AppDF {
+            type    = DF;	
+            aid     = A0:00:00:00:77:01:00:70:0A:10:00:F1:00:00:01:00;
+            file-id = 5015;
+
+            EF PKCS15-ODF {
+                file-id = 5031;
+            	ACL     = *=NEVER;
+                ACL     = READ=NONE;
+            }
+
+            EF PKCS15-TokenInfo {
+                file-id = 5032;
+            	ACL     = *=NEVER;
+                ACL     = READ=NONE;
+            }
+
+            EF PKCS15-AODF {
+                file-id = 7001;
+            	ACL     = *=NEVER;
+                ACL     = READ=NONE;
+            }
+
+            EF PKCS15-PrKDF {
+                file-id = 7002;
+                ACL     = *=NONE;
+            }
+
+            EF PKCS15-PuKDF {
+                file-id = 7004;
+                ACL     = *=NONE;
+            }
+
+            EF PKCS15-SKDF {
+                file-id = 7003;
+                ACL     = *=NONE;
+            }
+
+            EF PKCS15-CDF {
+                file-id = 7005;
+                ACL     = *=NONE;
+            }
+
+            EF PKCS15-DODF {
+                file-id = 7006;
+                ACL     = *=NONE;
+            }
+
+            BSO template-private-key {
+		ACL     = UPDATE=CHV1, DELETE=CHV1, DECIPHER=CHV1, AUTHENTICATE=CHV1, GENERATE=CHV1, SIGN=NEVER;
+            }
+
+            BSO template-public-key {
+                ACL     = *=NONE;
+            }
+         
+            EF template-certificate {
+                file-id = B000;
+		ACL     = READ=NONE, DELETE=NONE, UPDATE=CHV1, RESIZE=CHV1;
+            }
+        }
+    }
+}
+