staauth.c

SecuDe是一个由安全应用程序接口组成,对验证机制、证件处理、PEM、X.400报文处理和密钥管理提供支持。SecuDe提供DES、 RSA杂凑函数、密钥生成以及数字签名的生成和核实等多种密码机制。

/*							       */
/* CALLED FUNCTIONS					       */
/*  check_sct_sc               ERROR-Codes		       */
/*			         ENOCARD		       */
/*			         ESIDUNK		       */
/*			 	 ENOSHELL		       */
/*                               EOPERR                        */
/*			         EEMPTY                        */
/*                               EMEMAVAIL                     */
/*                               ECLERR                        */
/*                               ESIDUNK                       */
/*                               ERDERR                        */
/*                               EINVARG		       */
/*                               ETOOLONG		       */
/*                               sw1/sw2 from SCT response     */
/*                               T1 - ERROR                    */
/*							       */
/*  get_sct_keyid              ERROR-Codes		       */
/*			         EINVKID		       */
/*							       */
/*  check_sec_mess             ERROR-Codes		       */
/*			         M_ESECMESS		       */
/*							       */
/*  sct_interface	       ERROR-Codes	               */
/*                               EINVARG		       */
/*                               ETOOLONG		       */
/*                               EMEMAVAIL		       */
/*                               ESIDUNK                       */
/*                               EPARMISSED                    */
/*                               INVPAR                        */
/*                               EINVINS                       */
/*                               sw1/sw2 from SCT response     */
/*                               T1 - ERROR                    */
/*							       */
/*  err_analyse		       ERROR_Codes	               */
/*				 ENOSHELL		       */
/*                               EOPERR                        */
/*			         EEMPTY                        */
/*                               ECLERR                        */
/*                               ESIDUNK                       */
/*                               ERDERR                        */
/*							       */
/*  set_errmsg						       */
/*							       */
/*  sta_aux_bytestr_free				       */
/*							       */
/*-------------------------------------------------------------*/
int
sca_check_pin(sct_id, key_id, sec_mess)
	int             sct_id;
	KeyId          *key_id;
	SecMess        *sec_mess;
{
	/*----------------------------------------------------------*/
	/* Definitions					       */
	/*----------------------------------------------------------*/
	int             rc;
	char            sct_keyid;	/* char representation of the key_id */

	/*----------------------------------------------------------*/
	/* Statements					       */
	/*----------------------------------------------------------*/
	rc = 0;
	sca_errno = M_NOERR;
	sca_errmsg = NULL;
	sc_expect = TRUE;

#ifdef TEST
	fprintf(stdout, "\n***** STAMOD-Routine sca_check_pin *****\n\n");
	fprintf(stdout, "TRACE of the input parameters : \n");
	fprintf(stdout, "sct_id		        : %d\n", sct_id);
	print_keyid(key_id);
	print_secmess(sec_mess);
	fprintf(stdout, "\n\n");
#endif

	/*-----------------------------------------------------*/
	/* call check_sct_sc    		               */
	/*-----------------------------------------------------*/
	if (check_sct_sc(sct_id, sc_expect) == -1)
		return (-1);

	/*-----------------------------------------------------*/
	/* Check input parameters			       */
	/*-----------------------------------------------------*/

	/*-----------------------------------------------------*/
	/* Check key_id				       */
	/*-----------------------------------------------------*/
	if ((key_id->key_level != SC_MF) &&
	    (key_id->key_level != SC_DF) &&
	    (key_id->key_level != SC_SF)) {
		sca_errno = EINVKID;
		set_errmsg();
		return (-1);
	}
	if ((key_id->key_number < 1) ||
	    (key_id->key_number > MAX_KEYID)) {
		sca_errno = EINVKID;
		set_errmsg();
		return (-1);
	}
	if ((sct_keyid = get_sct_keyid(key_id)) == -1)	/* get char from key_id */
		return (-1);

	/*-----------------------------------------------------*/
	/* Check sec_mess parameter			       */
	/*-----------------------------------------------------*/
	if (check_sec_mess(sec_mess) == -1)
		return (-1);


	/*-----------------------------------------------------*/
	/* Prepare parameters for the SCT Interface          */
	/*-----------------------------------------------------*/
	command = S_AUTH;
	request.rq_p1.kid = sct_keyid;
	request.rq_p2.acp = PIN_USER;
	request.rq_datafield.auth_secmode = sec_mess;

	/*-----------------------------------------------------*/
	/* Call SCT Interface     			       */
	/*-----------------------------------------------------*/
	rc = sct_interface(sct_id, command, &request, &response);
	if (rc < 0) {
		sca_errno = sct_errno;
		sca_errmsg = sct_errmsg;
		err_analyse(sct_id);
		return (-1);
	}
	/*-----------------------------------------------------*/
	/* Normal End	 (Release storage)		       */
	/*-----------------------------------------------------*/
	sta_aux_bytestr_free(&response);

#ifdef TEST
	fprintf(stdout, "\n***** Normal end of   sca_check_pin *********************************************\n\n");
#endif

	return (sca_errno);

}				/* end sca_check_pin */

/*-------------------------------------------------------------*/
/* E N D   O F	 P R O C E D U R E	sca_check_pin	       */
/*-------------------------------------------------------------*/



/*-------------------------------------------------------------*/
/*						         | GMD */
/*						         +-----*/
/* PROC  sca_unblock_pin	  VERSION   1.0	    	       */
/*				     DATE   Januar 1992	       */
/*			      	       BY   U.Viebeg           */
/*							       */
/* DESCRIPTION						       */
/*  Unblock a blocked PIN		                       */
/*  A smartcard must be inserted.		               */
/*							       */
/*							       */
/* IN			     DESCRIPTION		       */
/*   sct_id		       SCT identifier		       */
/*                                                             */
/*   key_id	               key_id of the PIN to be         */
/*                             changed		               */
/*                                                             */
/*   sec_mess	               Specification of the security   */
/*			       mode(s) for the command and     */
/*			       response exchange between SCT   */
/*			       and smartcard.                  */
/*							       */
/* OUT							       */
/*							       */
/*							       */
/* RETURN		     DESCRIPTION	      	       */
/*   0	         	       o.k			       */
/*  -1			       error			       */
/*				 EINVKID		       */
/*							       */
/* CALLED FUNCTIONS					       */
/*  check_sct_sc               ERROR-Codes		       */
/*			         ENOCARD		       */
/*			         ESIDUNK		       */
/*			 	 ENOSHELL		       */
/*                               EOPERR                        */
/*			         EEMPTY                        */
/*                               EMEMAVAIL                     */
/*                               ECLERR                        */
/*                               ESIDUNK                       */
/*                               ERDERR                        */
/*                               EINVARG		       */
/*                               ETOOLONG		       */
/*                               sw1/sw2 from SCT response     */
/*                               T1 - ERROR                    */
/*							       */
/*  get_sct_keyid              ERROR-Codes		       */
/*			         EINVKID		       */
/*							       */
/*  check_sec_mess             ERROR-Codes		       */
/*			         M_ESECMESS		       */
/*							       */
/*  sct_interface	       ERROR-Codes	               */
/*                               EINVARG		       */
/*                               ETOOLONG		       */
/*                               EMEMAVAIL		       */
/*                               ESIDUNK                       */
/*                               EPARMISSED                    */
/*                               INVPAR                        */
/*                               EINVINS                       */
/*                               sw1/sw2 from SCT response     */
/*                               T1 - ERROR                    */
/*							       */
/*  err_analyse		       ERROR_Codes	               */
/*				 ENOSHELL		       */
/*                               EOPERR                        */
/*			         EEMPTY                        */
/*                               ECLERR                        */
/*                               ESIDUNK                       */
/*                               ERDERR                        */
/*							       */
/*  set_errmsg						       */
/*							       */
/*  sta_aux_bytestr_free				       */
/*							       */
/*-------------------------------------------------------------*/
int
sca_unblock_pin(sct_id, key_id, sec_mess)
	int             sct_id;
	KeyId          *key_id;
	SecMess        *sec_mess;
{
	/*----------------------------------------------------------*/
	/* Definitions					       */
	/*----------------------------------------------------------*/
	int             rc;
	char            sct_keyid;	/* char representation of the key_id */

	/*----------------------------------------------------------*/
	/* Statements					       */
	/*----------------------------------------------------------*/
	rc = 0;
	sca_errno = M_NOERR;
	sca_errmsg = NULL;
	sc_expect = TRUE;

#ifdef TEST
	fprintf(stdout, "\n***** STAMOD-Routine sca_unblock_pin *****\n\n");
	fprintf(stdout, "TRACE of the input parameters : \n");
	fprintf(stdout, "sct_id		        : %d\n", sct_id);
	print_keyid(key_id);
	print_secmess(sec_mess);
	fprintf(stdout, "\n\n");
#endif

	/*-----------------------------------------------------*/
	/* call check_sct_sc    		               */
	/*-----------------------------------------------------*/
	if (check_sct_sc(sct_id, sc_expect) == -1)
		return (-1);

	/*-----------------------------------------------------*/
	/* Check input parameters			       */
	/*-----------------------------------------------------*/

	/*-----------------------------------------------------*/
	/* Check key_id				       */
	/*-----------------------------------------------------*/
	if ((key_id->key_level != SC_MF) &&
	    (key_id->key_level != SC_DF) &&
	    (key_id->key_level != SC_SF)) {
		sca_errno = EINVKID;
		set_errmsg();
		return (-1);
	}
	if ((key_id->key_number < 1) ||
	    (key_id->key_number > MAX_KEYID)) {
		sca_errno = EINVKID;
		set_errmsg();
		return (-1);
	}
	if ((sct_keyid = get_sct_keyid(key_id)) == -1)	/* get char from key_id */
		return (-1);

	/*-----------------------------------------------------*/
	/* Check sec_mess parameter			       */
	/*-----------------------------------------------------*/
	if (check_sec_mess(sec_mess) == -1)
		return (-1);


	/*-----------------------------------------------------*/
	/* Prepare parameters for the SCT Interface          */
	/*-----------------------------------------------------*/
	command = S_AUTH;
	request.rq_p1.kid = sct_keyid;
	request.rq_p2.acp = PUK_CHECK;
	request.rq_datafield.auth_secmode = sec_mess;

	/*-----------------------------------------------------*/
	/* Call SCT Interface     			       */
	/*-----------------------------------------------------*/
	rc = sct_interface(sct_id, command, &request, &response);
	if (rc < 0) {
		sca_errno = sct_errno;
		sca_errmsg = sct_errmsg;
		err_analyse(sct_id);
		return (-1);
	}
	/*-----------------------------------------------------*/
	/* Normal End	 (Release storage)		       */
	/*-----------------------------------------------------*/
	sta_aux_bytestr_free(&response);

#ifdef TEST
	fprintf(stdout, "\n***** Normal end of   sca_unblock_pin *********************************************\n\n");
#endif

	return (sca_errno);

}				/* end sca_unblock_pin */

/*-------------------------------------------------------------*/
/* E N D   O F	 P R O C E D U R E	sca_unblock_pin	       */
/*-------------------------------------------------------------*/


/*-------------------------------------------------------------*/
/*						         | GMD */
/*						         +-----*/
/* PROC  sca_auth		  VERSION   1.0	    	       */
/*				     DATE   Januar 1992	       */
/*			      	       BY   U.Viebeg           */
/*							       */
/* DESCRIPTION						       */
/*  Device authentication		                       */
/*  A smartcard must be inserted.		               */
/*							       */