OpenPACE

Macros | Functions
ta.h File Reference

Interface for Terminal Authentication. More...

`#include <eac/eac.h>`

Go to the source code of this file.

## Macros
#define | TA_FLAG_SKIP_TIMECHECK 1
| Skip checking effective and expiration date of cv certificates against the system's current time.

## Functions
void | TA_disable_checks (EAC_CTX *ctx)
| Enables `TA_FLAG_SKIP_TIMECHECK` in the TA context. More...
int | TA_STEP2_import_certificate (const EAC_CTX *ctx, const unsigned char *cert, size_t cert_len)
| Imports a CV Certificate to the EAC context. More...
BUF_MEM * | TA_STEP3_generate_ephemeral_key (const EAC_CTX *ctx)
| Generates ephemeral key for CA. More...
BUF_MEM * | TA_STEP4_get_nonce (const EAC_CTX *ctx)
| Generates a nonce for the PCD. More...
int | TA_STEP4_set_nonce (const EAC_CTX *ctx, const BUF_MEM *nonce)
| Import the nonce from the PICC. More...
BUF_MEM * | TA_STEP5_sign (const EAC_CTX *ctx, const BUF_MEM *my_ta_eph_pubkey, const BUF_MEM *opp_pace_eph_pubkey, const BUF_MEM *auxdata)
| Signs data for terminal authentication. More...
int | TA_STEP6_verify (const EAC_CTX *ctx, const BUF_MEM *opp_ta_comp_eph_pubkey, const BUF_MEM *my_pace_comp_eph_pubkey, const BUF_MEM *auxdata, const BUF_MEM *signature)
| Verifies PCD's signature from TA step 5. More...

## Detailed Description

Interface for Terminal Authentication.

Terminal authentication (TA) is a protocol used to check the authenticity of a Terminal communicating with an MRTD chip. It is also used to establish the effective access rights of the terminal for all further communication. TA is a challenge- response protocol in which the certificate issues a challenge which is signed by the terminal. In order to be able to prove the authenticity of the answer, the MRTD chip needs to be provided with a certificate chain, which goes back to its own trust anchor.

Date
  2011-04-03

Author
  Frank Morgner frank.nosp@m.morg.nosp@m.ner@g.nosp@m.mail.nosp@m..com
  Dominik Oepen oepen.nosp@m.@inf.nosp@m.ormat.nosp@m.ik.h.nosp@m.u-ber.nosp@m.lin..nosp@m.de

Definition in file ta.h.