globalplatform/security.h

Go to the documentation of this file.

/*  Copyright (c) 2009, Karsten Ohme
 *  This file is part of GlobalPlatform.
 *
 *  GlobalPlatform is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU Lesser General Public License as published by
 *  the Free Software Foundation, either version 3 of the License, or
 *  (at your option) any later version.
 *
 *  GlobalPlatform is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU Lesser General Public License for more details.
 *
 *  You should have received a copy of the GNU Lesser General Public License
 *  along with GlobalPlatform.  If not, see <http://www.gnu.org/licenses/>.
 */

#ifndef SECURITY_H_
#define SECURITY_H_

#ifdef __cplusplus
extern "C"
{
#endif

#include "types.h"

#define OP_201 201 //!< OpenPlatform specification 2.0.1' mode
#define GP_211 211 //!< GlobalPlatform specification 2.1.1 mode

/* Secure Channel stuff */

#define GP211_SCP01 0x01 //!< Secure Channel Protocol '01'
#define GP211_SCP02 0x02 //!< Secure Channel Protocol '02'

#define GP211_SCP01_IMPL_i05 0x05

#define GP211_SCP01_IMPL_i15 0x15

#define GP211_SCP02_IMPL_i44 0x44

#define GP211_SCP02_IMPL_i45 0x45

#define GP211_SCP02_IMPL_i54 0x54

#define GP211_SCP02_IMPL_i55 0x55

#define GP211_SCP02_IMPL_i04 0x04

#define GP211_SCP02_IMPL_i05 0x05

#define GP211_SCP02_IMPL_i0A 0x0A

#define GP211_SCP02_IMPL_i0B 0x0B

#define GP211_SCP02_IMPL_i14 0x14

#define GP211_SCP02_IMPL_i15 0x15

#define GP211_SCP02_IMPL_i1A 0x1A

#define GP211_SCP02_IMPL_i1B 0x1B


#define GP211_SCP01_SECURITY_LEVEL_C_DEC_C_MAC 0x03 //!< Secure Channel Protocol '01': C-DECRYPTION and C-MAC
#define GP211_SCP01_SECURITY_LEVEL_C_MAC 0x01 //!< Secure Channel Protocol '01': C-MAC
#define GP211_SCP01_SECURITY_LEVEL_NO_SECURE_MESSAGING 0x00 //!< Secure Channel Protocol '01': No secure messaging expected.

#define GP211_SCP02_SECURITY_LEVEL_C_DEC_C_MAC_R_MAC 0x13 //!< Secure Channel Protocol '02': C-DECRYPTION, C-MAC and R-MAC
#define GP211_SCP02_SECURITY_LEVEL_C_MAC_R_MAC 0x11 //!< Secure Channel Protocol '02': C-MAC and R-MAC
#define GP211_SCP02_SECURITY_LEVEL_R_MAC 0x10 //!< Secure Channel Protocol '02': R-MAC
#define GP211_SCP02_SECURITY_LEVEL_C_DEC_C_MAC 0x03 //!< Secure Channel Protocol '02': C-DECRYPTION and C-MAC
#define GP211_SCP02_SECURITY_LEVEL_C_MAC 0x01 //!< Secure Channel Protocol '02': C-MAC
#define GP211_SCP02_SECURITY_LEVEL_NO_SECURE_MESSAGING 0x00 //!< Secure Channel Protocol '02': No secure messaging expected.

#define GP211_KEY_TYPE_RSA_PUB_N 0xA1 //!< 'A1' RSA Public Key - modulus N component (clear text).
#define GP211_KEY_TYPE_RSA_PUB_E 0xA0 //!< 'A0' RSA Public Key - public exponent e component (clear text)
#define GP211_KEY_TYPE_RSA_PRIV_N 0xA2 //!< ''A2' RSA Private Key - modulus N component
#define GP211_KEY_TYPE_RSA_PRIV_D 0xA3 //!< ''A3' RSA Private Key - private exponent d component
#define GP211_KEY_TYPE_RSA_PRIV_P 0xA4 //!< ''A4' RSA Private Key - Chinese Remainder P component
#define GP211_KEY_TYPE_RSA_PRIV_Q 0xA5 //!< ''A5' RSA Private Key - Chinese Remainder Q component
#define GP211_KEY_TYPE_RSA_PRIV_PQ 0xA6 //!< ''A6' RSA Private Key - Chinese Remainder PQ component
#define GP211_KEY_TYPE_RSA_PRIV_DP1 0xA7 //!< ''A7' RSA Private Key - Chinese Remainder DP1 component
#define GP211_KEY_TYPE_RSA_PRIV_DQ1 0xA8 //!< ''A8' RSA Private Key - Chinese Remainder DQ1 component


#define GP211_KEY_TYPE_3DES 0x81 //!< Reserved (triple DES).
#define GP211_KEY_TYPE_DES 0x80 //!< '80' DES mode (EBC/CBC) implicitly known.
#define GP211_KEY_TYPE_3DES_CBC 0x82 //!<'82' Triple DES in CBC mode.
#define GP211_KEY_TYPE_DES_ECB 0x83 //!<'83' DES in ECB mode.
#define GP211_KEY_TYPE_DES_CBC 0x84 //!<'84' DES in CBC mode.

#define OP201_SECURITY_LEVEL_ENC_MAC 0x03 //!< Command messages are signed and encrypted.
#define OP201_SECURITY_LEVEL_MAC 0x01 //!< Command messages are signed.
#define OP201_SECURITY_LEVEL_PLAIN 0x00 //!< Command messages are plaintext.

#define OP201_KEY_TYPE_RSA_PUP_N 0xA1 //!< 'A1' RSA Public Key - modulus N component (clear text).
#define OP201_KEY_TYPE_RSA_PUP_E 0xA0 //!< 'A0' RSA Public Key - public exponent e component (clear text)
#define OP201_KEY_TYPE_DES 0x80 //!< DES (ECB/CBC) key.
#define OP201_KEY_TYPE_DES_ECB 0x81 //!< DES ECB.
#define OP201_KEY_TYPE_DES_CBC 0x82 //!< DES CBC.

typedef struct {
        BYTE securityLevel; 
        BYTE sessionMacKey[16]; 
        BYTE sessionEncKey[16]; 
        BYTE lastMac[8]; 
        /* Augusto: added two more attributes for key information */
        BYTE keySetVersion; 
        BYTE keyIndex; 
        /* end */
} OP201_SECURITY_INFO;


typedef struct {
        BYTE securityLevel; 
        BYTE secureChannelProtocol; 
        BYTE secureChannelProtocolImpl; 
        BYTE C_MACSessionKey[16]; 
        BYTE R_MACSessionKey[16]; 
        BYTE encryptionSessionKey[16]; 
        BYTE dataEncryptionSessionKey[16]; 
        BYTE lastC_MAC[8]; 
        BYTE lastR_MAC[8]; 
        /* Augusto: added two more attributes for key information */
        BYTE keySetVersion; 
        BYTE keyIndex; 
        /* end */
} GP211_SECURITY_INFO;

typedef struct {
        BYTE securityDomainAIDLength; 
        BYTE securityDomainAID[16]; 
        BYTE signatureLength; 
        BYTE signature[128]; 
} OP201_DAP_BLOCK, OP201_RSA_DAP_BLOCK, OP201_3DES_DAP_BLOCK;



typedef struct {
        BYTE receiptLength; 
        BYTE receipt[8]; 
        BYTE confirmationCounterLength; 
        BYTE confirmationCounter[2]; 
        BYTE cardUniqueDataLength; 
        BYTE cardUniqueData[10]; 
} OP201_RECEIPT_DATA;




typedef struct {
        BYTE keySetVersion; 
        BYTE keyIndex; 
        BYTE keyType; 
        BYTE keyLength; 
} OP201_KEY_INFORMATION;

typedef struct {
        BYTE securityDomainAIDLength; 
        BYTE securityDomainAID[16]; 
        BYTE signatureLength; 
        BYTE signature[128]; 
} GP211_DAP_BLOCK, GP211_RSA_DAP_BLOCK, GP211_3DES_DAP_BLOCK;


typedef struct {
        BYTE receiptLength; 
        BYTE receipt[8]; 
        BYTE confirmationCounterLength; 
        BYTE confirmationCounter[2]; 
        BYTE cardUniqueDataLength; 
        BYTE cardUniqueData[10]; 
} GP211_RECEIPT_DATA;


typedef struct {
        BYTE keySetVersion; 
        BYTE keyIndex; 
        BYTE keyType; 
        BYTE keyLength; 
} GP211_KEY_INFORMATION;



#ifdef __cplusplus
}
#endif
#endif /* SECURITY_H_ */

---