EstEidCard.h

Go to the documentation of this file.

// Revision $Revision: 129 $
#pragma once
#include "CardBase.h"

class EstEidCard:
        public CardBase
{
        friend class EstEidCardMaintainer;
protected:
        enum {
                FILEID_MASTER = 0x3F00,
                FILEID_APP        =     0xEEEE,
                FILEID_RETRYCT =        0x0016,
                FILEID_KEYPOINTER  = 0x0033
        };
public:

        enum PinType {
                PUK = 0,
                PIN_AUTH = 1,
                PIN_SIGN = 2,
                };
        enum KeyType { AUTH = 0,SIGN = 1 };
        enum AlgType {
                MD5,SHA1,SSL
                };
        enum RecordNames {
                SURNAME = 1,
                FIRSTNAME,
                MIDDLENAME,
                SEX,
                CITIZEN,
                BIRTHDATE,
                ID,
                DOCUMENTID,
                EXPIRY,
                BIRTHPLACE,
                ISSUEDATE,
                RESIDENCEPERMIT,
                COMMENT1,COMMENT2,COMMENT3,COMMENT4
                };
private:
        void prepareSign_internal(KeyType keyId,std::string pin);
        ByteVec calcSign_internal(AlgType type,KeyType keyId, ByteVec hash,bool withOID = true);
        ByteVec RSADecrypt_internal(ByteVec cipher);
        void readPersonalData_internal(vector<std::string>& data,
                int firstRecord,int lastRecord );
        void enterPin(PinType pinType,std::string pin,bool forceUnsecure = false);
        bool validatePin_internal(PinType pinType,std::string pin, byte &retriesLeft,
                bool forceUnsecure = false);
        bool changePin_internal(
                PinType pinType,std::string newPin,std::string oldPin,bool useUnblockCommand=false);
        void reconnectWithT0();
        void checkProtocol();
        bool getRetryCounts_internal(byte &puk,byte &pinAuth,byte &pinSign);

public:
        EstEidCard(ManagerInterface &ref) : CardBase(ref) {}
        EstEidCard(ManagerInterface &ref,unsigned int idx) : 
          CardBase(ref,idx) {}
        EstEidCard(ManagerInterface &ref,ConnectionBase *conn)  :
          CardBase(ref,conn) {}
        ~EstEidCard() {}
        bool isInReader(unsigned int idx);

        std::string readCardID();
        std::string readCardName();
        bool readPersonalData(std::vector<std::string>& data,
                int firstRecord=SURNAME,int lastRecord=EXPIRY);
        bool getKeyUsageCounters(dword &authKey,dword &signKey);
        bool getRetryCounts(byte &puk,byte &pinAuth,byte &pinSign);
        ByteVec getAuthCert();
        ByteVec getSignCert();
        ByteVec calcSSL(ByteVec hash);
        ByteVec calcSSL(ByteVec hash,std::string pin);
        
        ByteVec calcSignSHA1(ByteVec hash,KeyType keyId,bool withOID = true);
        ByteVec calcSignSHA1(ByteVec hash,KeyType keyId,std::string pin,bool withOID = true);

        ByteVec calcSignMD5(ByteVec hash,KeyType keyId,bool withOID = true);
        ByteVec calcSignMD5(ByteVec hash,KeyType keyId,std::string pin,bool withOID = true);

        ByteVec RSADecrypt(ByteVec cipher);
        ByteVec RSADecrypt(ByteVec cipher,std::string pin);

        bool validateAuthPin(std::string pin,byte &retriesLeft );
        bool validateSignPin(std::string pin,byte &retriesLeft );
        bool validatePuk(std::string puk, byte &retriesLeft );

        bool changeAuthPin(std::string newPin,std::string oldPin, byte &retriesLeft );
        bool changeSignPin(std::string newPin,std::string oldPin, byte &retriesLeft );
        bool changePUK(std::string newPUK,std::string oldPUK, byte &retriesLeft );
        bool unblockAuthPin(std::string newPin,std::string PUK, byte &retriesLeft );
        bool unblockSignPin(std::string newPin,std::string PUK, byte &retriesLeft );

        void setSecEnv(byte env);
        void resetAuth();
};

---