Hi Peter

I am trying to extend openpgp-tool to load data to the various writable DOs,
> and - if possible - I want it to determine automatically the permissions of
> the (emulated) files using standard interfaces, i.e. security attributes or
> preferably ACLs. As the file system on openPGP cards only is emulated using
> opensc, I need to emulate these data structures too.
>
> I searched the net, but did not get anything that that really helped (I
> guess,
> I did not know/ use the correct search terms ;-)
>
> I found that ISO 7816-9 should contain info on security attributes, but I
> am
> not really keen on paying ~€60 for this information alone.
>

Have a look at "Security Attributes" in ISO 7816-4 and table
"Access mode byte for EFs".

You may either use compact or expanded form to describe your access rules.
When those DOs are selected I would return a FCP with tag A0
which should contan two access mode bytes (one for reading
and one for writing) each followed by security condition bytes.

Peter
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to