208 lines
4.2 KiB
Plaintext
208 lines
4.2 KiB
Plaintext
#
|
|
# pkcs15 profile for entersafe
|
|
#
|
|
cardinfo {
|
|
manufacturer = "EnterSafe";
|
|
min-pin-length = 4;
|
|
max-pin-length = 16;
|
|
pin-encoding = ascii-numeric;
|
|
pin-pad-char = 0x00;
|
|
}
|
|
|
|
option default {
|
|
macros {
|
|
pin-flags = local, initialized, needs-padding;
|
|
min-pin-length = 4;
|
|
df_acl = *=NEVER;
|
|
ef_acl = *=NEVER, READ=NONE, UPDATE=NONE, WRITE=NONE, DELETE=NONE;
|
|
sf_acl = *=NEVER, UPDATE=NONE;
|
|
protected = *=$PIN,READ=NONE;
|
|
unprotected = *=NONE;
|
|
dir-size = 112;
|
|
tinfo-size = 128;
|
|
unusedspace-size = 128;
|
|
odf-size = 256;
|
|
aodf-size = 256;
|
|
cdf-size = 512;
|
|
prkdf-size = 256;
|
|
pukdf-size = 256;
|
|
dodf-size = 256;
|
|
info-size = 128;
|
|
maxPin-size = 2;
|
|
}
|
|
}
|
|
|
|
option onepin {
|
|
macros {
|
|
pin-flags = local, initialized, needs-padding;
|
|
# df_acl = *=$PIN;
|
|
df_acl = *=NEVER, CRYPTO=NONE, FILES=NONE, CREATE=NONE, DELETE=NONE;
|
|
ef_acl = *=NEVER, READ=NONE, UPDATE=NONE, WRITE=NONE, DELETE=NONE;
|
|
sf_acl = *=NEVER, UPDATE=NONE;
|
|
protected = *=NEVER,READ=NONE, UPDATE=$PIN, DELETE=$PIN;
|
|
unprotected = *=NONE;
|
|
dir-size = 112;
|
|
tinfo-size = 128;
|
|
unusedspace-size = 128;
|
|
odf-size = 512;
|
|
aodf-size = 256;
|
|
cdf-size = 2048;
|
|
prkdf-size = 1024;
|
|
pukdf-size = 1024;
|
|
dodf-size = 256;
|
|
info-size = 128;
|
|
maxPin-size = 2;
|
|
}
|
|
}
|
|
|
|
PIN so-pin {
|
|
reference = 1;
|
|
attempts = 6;
|
|
flags = $pin-flags;
|
|
min-length = $min-pin-length;
|
|
}
|
|
PIN so-puk {
|
|
attempts = 6;
|
|
flags = $pin-flags;
|
|
min-length = $min-pin-length;
|
|
}
|
|
PIN user-pin {
|
|
reference = 2;
|
|
attempts = 6;
|
|
flags = $pin-flags;
|
|
min-length = $min-pin-length;
|
|
}
|
|
PIN user-puk {
|
|
attempts = 6;
|
|
flags = $pin-flags;
|
|
min-length = $min-pin-length;
|
|
}
|
|
|
|
# Additional filesystem info.
|
|
# This is added to the file system info specified in the
|
|
# main profile.
|
|
filesystem {
|
|
DF MF {
|
|
ACL = $df_acl;
|
|
size = 768;
|
|
file-id = 3F00;
|
|
aid = 65:6e:74:65:72:73:61:66:65:2d:66:69:70:73
|
|
|
|
BSO SKey-MF {
|
|
file-id = 5300;
|
|
ACL = $sf_acl
|
|
size = 4;
|
|
}
|
|
|
|
EF DIR {
|
|
type = EF;
|
|
size = $dir-size;
|
|
ACL = $ef_acl;
|
|
file-id = 2F00;
|
|
structure = linear-variable;
|
|
}
|
|
|
|
DF PKCS15-AppDF {
|
|
ACL = $df_acl;
|
|
size = 16000;
|
|
|
|
BSO SKey-AppDF {
|
|
file-id = 5301;
|
|
ACL = $sf_acl
|
|
size = 32;
|
|
}
|
|
|
|
EF MAXPIN {
|
|
file-id = 9F00;
|
|
size = $maxPin-size;
|
|
ACL = $unprotected;
|
|
}
|
|
|
|
EF PKCS15-ODF {
|
|
size = $odf-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-TokenInfo {
|
|
size = $tinfo-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-UnusedSpace {
|
|
size = $unusedspace-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-AODF {
|
|
size = $aodf-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-PrKDF {
|
|
size = $prkdf-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-PuKDF {
|
|
size = $pukdf-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-CDF {
|
|
size = $cdf-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
EF PKCS15-DODF {
|
|
size = $dodf-size;
|
|
ACL = $protected;
|
|
}
|
|
|
|
template key-domain {
|
|
EF private-key {
|
|
file-id = 2900;
|
|
#type = internal-ef;
|
|
structure = 0xA3;
|
|
#ACL = READ=CHV1,UPDATE=CHV1,CRYPTO=CHV1;
|
|
ACL = *=NONE;
|
|
}
|
|
|
|
EF public-key {
|
|
file-id = 3000;
|
|
structure = transparent;
|
|
ACL = *=NONE;
|
|
}
|
|
|
|
# Certificate template
|
|
EF certificate {
|
|
file-id = 3100;
|
|
structure = transparent;
|
|
ACL = READ=NONE,UPDATE=NONE;
|
|
}
|
|
|
|
# Extractable private keys are stored in transparent EFs.
|
|
# Encryption of the content is performed by libopensc.
|
|
EF extractable-key {
|
|
file-id = 3200;
|
|
structure = transparent;
|
|
ACL = *=NEVER,READ=NONE,UPDATE=$PIN;
|
|
}
|
|
|
|
# data objects are stored in transparent EFs.
|
|
EF data {
|
|
file-id = 3300;
|
|
structure = transparent;
|
|
ACL = *=NEVER,READ=NONE,UPDATE=NONE;
|
|
}
|
|
# data objects are stored in transparent EFs.
|
|
EF privdata {
|
|
file-id = 3400;
|
|
structure = transparent;
|
|
ACL = *=NEVER,READ=$PIN,UPDATE=$PIN;
|
|
}
|
|
|
|
}
|
|
}
|
|
}
|
|
}
|