OpenPACE
ta.h
Go to the documentation of this file.
1/*
2 * Copyright (c) 2010-2012 Frank Morgner and Dominik Oepen
3 *
4 * This file is part of OpenPACE.
5 *
6 * OpenPACE is free software: you can redistribute it and/or modify it under
7 * the terms of the GNU General Public License as published by the Free
8 * Software Foundation, either version 3 of the License, or (at your option)
9 * any later version.
10 *
11 * OpenPACE is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
13 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
14 * details.
15 *
16 * You should have received a copy of the GNU General Public License along with
17 * OpenPACE. If not, see <http://www.gnu.org/licenses/>.
18 *
19 * Additional permission under GNU GPL version 3 section 7
20 *
21 * If you modify this Program, or any covered work, by linking or combining it
22 * with OpenSSL (or a modified version of that library), containing
23 * parts covered by the terms of OpenSSL's license, the licensors of
24 * this Program grant you additional permission to convey the resulting work.
25 * Corresponding Source for a non-source form of such a combination shall include
26 * the source code for the parts of OpenSSL used as well as that of the
27 * covered work.
28 *
29 * If you modify this Program, or any covered work, by linking or combining it
30 * with OpenSC (or a modified version of that library), containing
31 * parts covered by the terms of OpenSC's license, the licensors of
32 * this Program grant you additional permission to convey the resulting work.
33 * Corresponding Source for a non-source form of such a combination shall include
34 * the source code for the parts of OpenSC used as well as that of the
35 * covered work.
36 */
37
58#ifndef TA_H_
59#define TA_H_
60
61#include <eac/eac.h>
62
63#ifdef __cplusplus
64extern "C" {
65#endif
66
68#define TA_FLAG_SKIP_TIMECHECK 1
69
80void
82
101int
103 const unsigned char *cert, size_t cert_len);
113BUF_MEM *
126BUF_MEM *
138int
139TA_STEP4_set_nonce(const EAC_CTX *ctx, const BUF_MEM *nonce);
152BUF_MEM *
153TA_STEP5_sign(const EAC_CTX *ctx, const BUF_MEM *my_ta_eph_pubkey,
154 const BUF_MEM *opp_pace_eph_pubkey, const BUF_MEM *auxdata);
168int
169TA_STEP6_verify(const EAC_CTX *ctx, const BUF_MEM *opp_ta_comp_eph_pubkey,
170 const BUF_MEM *my_pace_comp_eph_pubkey, const BUF_MEM *auxdata,
171 const BUF_MEM *signature);
172
175#ifdef __cplusplus
176}
177#endif
178#endif
Interface for Extended Access Control.
int TA_STEP2_import_certificate(const EAC_CTX *ctx, const unsigned char *cert, size_t cert_len)
Imports a CV Certificate to the EAC context.
void TA_disable_checks(EAC_CTX *ctx)
Enables TA_FLAG_SKIP_TIMECHECK in the TA context.
BUF_MEM * TA_STEP4_get_nonce(const EAC_CTX *ctx)
Generates a nonce for the PCD.
int TA_STEP4_set_nonce(const EAC_CTX *ctx, const BUF_MEM *nonce)
Import the nonce from the PICC.
BUF_MEM * TA_STEP3_generate_ephemeral_key(const EAC_CTX *ctx)
Generates ephemeral key for CA.
int TA_STEP6_verify(const EAC_CTX *ctx, const BUF_MEM *opp_ta_comp_eph_pubkey, const BUF_MEM *my_pace_comp_eph_pubkey, const BUF_MEM *auxdata, const BUF_MEM *signature)
Verifies PCD's signature from TA step 5.
BUF_MEM * TA_STEP5_sign(const EAC_CTX *ctx, const BUF_MEM *my_ta_eph_pubkey, const BUF_MEM *opp_pace_eph_pubkey, const BUF_MEM *auxdata)
Signs data for terminal authentication.
Context for the Extended Access Control protocol.
Definition eac.h:342