org.jmrtd

Interface APDULevelPACECapable

All Known Implementing Classes:

PACEAPDUSender

public interface APDULevelPACECapable

The low-level capability of sending APDUs for the PACE protocol.

Version:

$Revision: 1781 $

Author:

The JMRTD team ([email protected])

Method Summary

Modifier and Type	Method and Description
byte[]	sendGeneralAuthenticate(net.sf.scuba.smartcards.APDUWrapper wrapper, byte[] data, boolean isLast) Sends a General Authenticate command.
void	sendMSESetATMutualAuth(net.sf.scuba.smartcards.APDUWrapper wrapper, String oid, int refPublicKeyOrSecretKey, byte[] refPrivateKeyOrForComputingSessionKey) The MSE AT APDU for PACE, see ICAO TR-SAC-1.01, Section 3.2.1, BSI TR 03110 v2.03 B11.1.

Method Detail

sendMSESetATMutualAuth

void sendMSESetATMutualAuth(net.sf.scuba.smartcards.APDUWrapper wrapper,
                            String oid,
                            int refPublicKeyOrSecretKey,
                            byte[] refPrivateKeyOrForComputingSessionKey)
                     throws net.sf.scuba.smartcards.CardServiceException

The MSE AT APDU for PACE, see ICAO TR-SAC-1.01, Section 3.2.1, BSI TR 03110 v2.03 B11.1. Note that (for now) caller is responsible for prefixing the byte[] params with specified tags.

Parameters:

wrapper - secure messaging wrapper

oid - OID of the protocol to select (this method will prefix 0x80)

refPublicKeyOrSecretKey - value specifying whether to use MRZ (0x01) or CAN (0x02) (this method will prefix 0x83)

refPrivateKeyOrForComputingSessionKey - indicates a private key or reference for computing a session key (this method will prefix 0x84)

Throws:

net.sf.scuba.smartcards.CardServiceException - on error

sendGeneralAuthenticate

byte[] sendGeneralAuthenticate(net.sf.scuba.smartcards.APDUWrapper wrapper,
                               byte[] data,
                               boolean isLast)
                        throws net.sf.scuba.smartcards.CardServiceException

Sends a General Authenticate command.

Parameters:

wrapper - secure messaging wrapper

data - data to be sent, without the 0x7C prefix (this method will add it)

isLast - indicates whether this is the last command in the chain

Returns:

dynamic authentication data without the 0x7C prefix (this method will remove it)

Throws:

net.sf.scuba.smartcards.CardServiceException - on error