/src/opensc/src/libopensc/card-epass2003.c

Source
/*
 * Support for ePass2003 smart cards
 *
 * Copyright (C) 2008, Weitao Sun <weitao@ftsafe.com>
 * Copyright (C) 2011, Xiaoshuo Wu <xiaoshuo@ftsafe.com>
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
 */

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif
#ifdef ENABLE_SM    /* empty file without SM enabled */
#ifdef ENABLE_OPENSSL   /* empty file without openssl */

#include <ctype.h>
#include <stdlib.h>
#include <string.h>

#include <openssl/evp.h>
#include <openssl/sha.h>

#include "internal.h"
#include "asn1.h"

#include <ctype.h>
#include <stdlib.h>
#include <string.h>

#include <openssl/cmac.h>
#include <openssl/rand.h>
#include <openssl/sha.h>

#include "internal.h"
#include "asn1.h"
#include "cardctl.h"

/*
 * See https://github.com/OpenSC/OpenSC/issues/2572
 * 2012 ATR: note version 01:00:11
 *        3b:9f:95:81:31:fe:9f:00:66:46:53:05:01:00:11:71:df:00:00:03:90:00:80
 * 2022 ATRs: note version 23:00:25
 *   OpenSC-initialized ATR:
 *        3b 9f:95:81:31:fe:9f:00:66:46:53:05:23:00:25:71:df:00:00:03:90:00:96
 *   Feitian-initalized ATR:
 *        3b:9f:95:81:31:fe:9f:00:66:46:53:05:23:00:25:71:df:00:00:00:00:00:05
 */

static const struct sc_atr_table epass2003_atrs[] = {
  /* This is a FIPS certified card using SCP01 security messaging. */
  /* will match all the above */
  {"3B:9F:95:81:31:FE:9F:00:66:46:53:05:00:00:00:71:df:00:00:00:00:00:00",
   "FF:FF:FF:FF:FF:FF:FF:FF:FF:FF:FF:FF:00:00:00:FF:FF:FF:FF:00:00:00:00",
   "FTCOS/ePass2003", SC_CARD_TYPE_ENTERSAFE_FTCOS_EPASS2003, 0, NULL },
  {NULL, NULL, NULL, 0, 0, NULL}
};

static struct sc_card_operations *iso_ops = NULL;
static struct sc_card_operations epass2003_ops;

static struct sc_card_driver epass2003_drv = {
  "epass2003",
  "epass2003",
  &epass2003_ops,
  NULL, 0, NULL
};

#define KEY_TYPE_AES  0x01  /* FIPS mode */
#define KEY_TYPE_DES  0x02  /* Non-FIPS mode */

#define KEY_LEN_AES 16
#define KEY_LEN_DES 8
#define KEY_LEN_DES3  24
#define HASH_LEN  24

static unsigned char PIN_ID[2] = { ENTERSAFE_USER_PIN_ID, ENTERSAFE_SO_PIN_ID };

/*0x00:plain; 0x01:scp01 sm*/
#define SM_PLAIN        0x00
#define SM_SCP01        0x01

static unsigned char g_init_key_enc[16] = {
  0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C,
  0x0D, 0x0E, 0x0F, 0x10
};

static unsigned char g_init_key_mac[16] = {
  0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C,
  0x0D, 0x0E, 0x0F, 0x10
};

static unsigned char g_random[8];

typedef struct epass2003_exdata_st {
  unsigned char sm;   /* SM_PLAIN or SM_SCP01 */
  unsigned char smtype;   /* KEY_TYPE_AES or KEY_TYPE_DES */
  unsigned char sk_enc[16]; /* encrypt session key */
  unsigned char sk_mac[16]; /* mac session key */
  unsigned char icv_mac[16];  /* instruction counter vector(for sm) */
  unsigned char bFipsCertification; /* fips mode Alg */
  unsigned char currAlg;    /* current Alg */
  unsigned int  ecAlgFlags;   /* Ec Alg mechanism type*/
} epass2003_exdata;

#define REVERSE_ORDER4(x) (       \
    ((unsigned long)x & 0xFF000000)>> 24  | \
    ((unsigned long)x & 0x00FF0000)>>  8  | \
    ((unsigned long)x & 0x0000FF00)<<  8  | \
    ((unsigned long)x & 0x000000FF)<< 24)


static const struct sc_card_error epass2003_errors[] = {
  { 0x6200, SC_ERROR_CARD_CMD_FAILED, "Warning: no information given, non-volatile memory is unchanged" },
  { 0x6281, SC_ERROR_CORRUPTED_DATA,  "Part of returned data may be corrupted" },
  { 0x6282, SC_ERROR_FILE_END_REACHED,  "End of file/record reached before reading Le bytes" },
  { 0x6283, SC_ERROR_CARD_CMD_FAILED, "Selected file invalidated" },
  { 0x6284, SC_ERROR_CARD_CMD_FAILED, "FCI not formatted according to ISO 7816-4" },

  { 0x6300, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C1, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed. One tries left"},
  { 0x63C2, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed. Two tries left"},
  { 0x63C3, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C4, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C5, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C6, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C7, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C8, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63C9, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},
  { 0x63CA, SC_ERROR_PIN_CODE_INCORRECT,  "Authentication failed"},

  { 0x6381, SC_ERROR_CARD_CMD_FAILED, "Warning: file filled up by last write" },

  { 0x6581, SC_ERROR_MEMORY_FAILURE,  "Memory failure" },

  { 0x6700, SC_ERROR_WRONG_LENGTH,  "Wrong length" },

  { 0x6800, SC_ERROR_NO_CARD_SUPPORT, "Functions in CLA not supported" },
  { 0x6881, SC_ERROR_NO_CARD_SUPPORT, "Logical channel not supported" },
  { 0x6882, SC_ERROR_NO_CARD_SUPPORT, "Secure messaging not supported" },

  { 0x6900, SC_ERROR_NOT_ALLOWED,   "Command not allowed" },
  { 0x6981, SC_ERROR_CARD_CMD_FAILED, "Command incompatible with file structure" },
  { 0x6982, SC_ERROR_SECURITY_STATUS_NOT_SATISFIED, "Security status not satisfied" },
  { 0x6983, SC_ERROR_AUTH_METHOD_BLOCKED, "Authentication method blocked" },
  { 0x6984, SC_ERROR_REF_DATA_NOT_USABLE, "Referenced data not usable" },
  { 0x6985, SC_ERROR_NOT_ALLOWED,   "Conditions of use not satisfied" },
  { 0x6986, SC_ERROR_NOT_ALLOWED,   "Command not allowed (no current EF)" },
  { 0x6987, SC_ERROR_INCORRECT_PARAMETERS,"Expected SM data objects missing" },
  { 0x6988, SC_ERROR_INCORRECT_PARAMETERS,"SM data objects incorrect" },

  { 0x6A00, SC_ERROR_INCORRECT_PARAMETERS,"Wrong parameter(s) P1-P2" },
  { 0x6A80, SC_ERROR_INCORRECT_PARAMETERS,"Incorrect parameters in the data field" },
  { 0x6A81, SC_ERROR_NO_CARD_SUPPORT, "Function not supported" },
  { 0x6A82, SC_ERROR_FILE_NOT_FOUND,  "File not found" },
  { 0x6A83, SC_ERROR_RECORD_NOT_FOUND,  "Record not found" },
  { 0x6A84, SC_ERROR_NOT_ENOUGH_MEMORY, "Not enough memory space in the file" },
  { 0x6A85, SC_ERROR_INCORRECT_PARAMETERS,"Lc inconsistent with TLV structure" },
  { 0x6A86, SC_ERROR_INCORRECT_PARAMETERS,"Incorrect parameters P1-P2" },
  { 0x6A87, SC_ERROR_INCORRECT_PARAMETERS,"Lc inconsistent with P1-P2" },
  { 0x6A88, SC_ERROR_DATA_OBJECT_NOT_FOUND,"Referenced data not found" },
  { 0x6A89, SC_ERROR_FILE_ALREADY_EXISTS,  "File already exists"},
  { 0x6A8A, SC_ERROR_FILE_ALREADY_EXISTS,  "DF name already exists"},

  { 0x6B00, SC_ERROR_INCORRECT_PARAMETERS,"Wrong parameter(s) P1-P2" },
  { 0x6D00, SC_ERROR_INS_NOT_SUPPORTED, "Instruction code not supported or invalid" },
  { 0x6E00, SC_ERROR_CLASS_NOT_SUPPORTED, "Class not supported" },
  { 0x6F00, SC_ERROR_CARD_CMD_FAILED, "No precise diagnosis" },

  { 0x9000,SC_SUCCESS,                       NULL }
};

typedef struct sec_attr_to_acl_entries {
  unsigned int file_type;   /* file->type */
  unsigned int file_ef_structure; /* file->ef_structure */
  int index;      /* index in  epass2003 iversion of sec_attr */
  /* use the follow for sc_file_add_entry */
  int op;       /* SC_AC_OP_* */
} sec_attr_to_acl_entries_t;

// clang-format off
/* Known combinations of file type and methods. More can be added as needed */
static const sec_attr_to_acl_entries_t sec_attr_to_acl_entry[] = {
  {SC_FILE_TYPE_DF, 0, 0,       SC_AC_OP_LIST_FILES},
  {SC_FILE_TYPE_DF, 0, 1,       SC_AC_OP_CREATE},
  {SC_FILE_TYPE_DF, 0, 3,       SC_AC_OP_DELETE},

  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_TRANSPARENT, 0,  SC_AC_OP_READ},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_TRANSPARENT, 1,  SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_TRANSPARENT, 3,  SC_AC_OP_DELETE},

  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_TRANSPARENT, 0,  SC_AC_OP_READ},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_TRANSPARENT, 1,  SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_TRANSPARENT, 3,  SC_AC_OP_DELETE},

  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_FIXED, 0,  SC_AC_OP_READ},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_FIXED, 1,  SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_FIXED, 2,  SC_AC_OP_WRITE},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_FIXED, 3,  SC_AC_OP_DELETE},

  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_VARIABLE, 0,  SC_AC_OP_READ},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_VARIABLE, 1,  SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_VARIABLE, 2,  SC_AC_OP_WRITE},
  {SC_FILE_TYPE_WORKING_EF, SC_FILE_EF_LINEAR_VARIABLE, 3,  SC_AC_OP_DELETE},

  {SC_FILE_TYPE_BSO, 0, 0,        SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_BSO, 0, 3,        SC_AC_OP_DELETE},

  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_CRT, 1,  SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_CRT,  1,  SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_CRT, 2,  SC_AC_OP_CRYPTO},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_CRT,  2,  SC_AC_OP_CRYPTO},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_CRT, 3,  SC_AC_OP_DELETE},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_CRT,  3,  SC_AC_OP_DELETE},

  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC, 0, SC_AC_OP_READ},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC,  0, SC_AC_OP_READ},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC, 1, SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC,  1, SC_AC_OP_UPDATE},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC, 2, SC_AC_OP_CRYPTO},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC,  2, SC_AC_OP_CRYPTO},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC, 3, SC_AC_OP_DELETE},
  {SC_FILE_TYPE_INTERNAL_EF, SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC,  3, SC_AC_OP_DELETE},
};
// clang-format on

static int epass2003_transmit_apdu(struct sc_card *card, struct sc_apdu *apdu);
static int epass2003_select_file(struct sc_card *card, const sc_path_t * in_path, sc_file_t ** file_out);
int epass2003_refresh(struct sc_card *card);
static int hash_data(struct sc_card *card, const unsigned char *data, size_t datalen, unsigned char *hash, unsigned int mechanismType);

static int
epass2003_check_sw(struct sc_card *card, unsigned int sw1, unsigned int sw2)
{
  const int err_count = sizeof(epass2003_errors)/sizeof(epass2003_errors[0]);
  int i;

  /* Handle special cases here */
  if (sw1 == 0x6C) {
    sc_log(card->ctx, "Wrong length; correct length is %d", sw2);
    return SC_ERROR_WRONG_LENGTH;
  }

  for (i = 0; i < err_count; i++) {
    if (epass2003_errors[i].SWs == ((sw1 << 8) | sw2)) {
      sc_log(card->ctx, "%s", epass2003_errors[i].errorstr);
      return epass2003_errors[i].errorno;
    }
  }

  sc_log(card->ctx, "Unknown SWs; SW1=%02X, SW2=%02X", sw1, sw2);
  return SC_ERROR_CARD_CMD_FAILED;
}

static int
sc_transmit_apdu_t(sc_card_t *card, sc_apdu_t *apdu)
{
  size_t resplen = apdu->resplen;
  int r = sc_transmit_apdu(card, apdu);
  if ((0x69 == apdu->sw1 && 0x85 == apdu->sw2) || (0x69 == apdu->sw1 && 0x88 == apdu->sw2)) {
    epass2003_refresh(card);
    /* renew old resplen */
    apdu->resplen = resplen;
    r = sc_transmit_apdu(card, apdu);
  }
  return r;
}

static int
openssl_enc(const EVP_CIPHER * cipher, const unsigned char *key, const unsigned char *iv,
    const unsigned char *input, size_t length, unsigned char *output)
{
  int r = SC_ERROR_INTERNAL;
  EVP_CIPHER_CTX * ctx = NULL;
  int outl = 0;
  int outl_tmp = 0;
  unsigned char iv_tmp[EVP_MAX_IV_LENGTH] = {0};

  memcpy(iv_tmp, iv, EVP_MAX_IV_LENGTH);
  ctx = EVP_CIPHER_CTX_new();
  if (ctx == NULL)
    goto out;

  if (!EVP_EncryptInit_ex(ctx, cipher, NULL, key, iv_tmp) || !EVP_CIPHER_CTX_set_padding(ctx, 0))
    goto out;

  if (!EVP_EncryptUpdate(ctx, output, &outl, input, (int)length))
    goto out;

  if (!EVP_EncryptFinal_ex(ctx, output + outl, &outl_tmp))
    goto out;

  r = SC_SUCCESS;
out:
  EVP_CIPHER_CTX_free(ctx);
  return r;
}

static int
openssl_dec(const EVP_CIPHER * cipher, const unsigned char *key, const unsigned char *iv,
    const unsigned char *input, size_t length, unsigned char *output)
{
  int r = SC_ERROR_INTERNAL;
  EVP_CIPHER_CTX * ctx = NULL;
  int outl = 0;
  int outl_tmp = 0;
  unsigned char iv_tmp[EVP_MAX_IV_LENGTH] = {0};

  memcpy(iv_tmp, iv, EVP_MAX_IV_LENGTH);
  ctx = EVP_CIPHER_CTX_new();
  if (ctx == NULL)
    goto out;

  if (!EVP_DecryptInit_ex(ctx, cipher, NULL, key, iv_tmp) ||
      !EVP_CIPHER_CTX_set_padding(ctx, 0))
    goto out;

  if (!EVP_DecryptUpdate(ctx, output, &outl, input, (int)length))
    goto out;

  if (!EVP_DecryptFinal_ex(ctx, output + outl, &outl_tmp))
    goto out;

  r = SC_SUCCESS;
out:
  EVP_CIPHER_CTX_free(ctx);
  return r;
}

static int
aes128_encrypt_cmac_ft(struct sc_card *card, const unsigned char *key, int keysize,
  const unsigned char *input, size_t length, unsigned char *output,unsigned char *iv)
{
  unsigned char data1[32] = {0};
  unsigned char data2[32] = {0};
  unsigned char k1Bin[32] = {0};
  unsigned char k2Bin[32] = {0};

  unsigned char check = 0;
  BIGNUM *enc1,*lenc1;
  BIGNUM *enc2,*lenc2;

  // k1
  int offset = 0;
  int r = SC_ERROR_INTERNAL;
  unsigned char out[32] = {0};
  unsigned char iv0[EVP_MAX_IV_LENGTH] = {0};
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "AES-128-ECB");
  r = openssl_enc(alg, key, iv0, data1, 16, out);
  if (r != SC_SUCCESS) {
    sc_log_openssl(card->ctx);
    sc_evp_cipher_free(alg);
    return r;
  }

  check = out[0];
  enc1 = BN_new();
  lenc1 = BN_new();
  BN_bin2bn(out,16,enc1);
  BN_lshift1(lenc1,enc1);
  BN_bn2bin(lenc1,k1Bin);
  if (check & 0x80) {
    offset = 1;
    k1Bin[15+offset] ^= 0x87;
  }
  BN_free(enc1);
  BN_free(lenc1);

  // k2
  enc2 = BN_new();
  lenc2 = BN_new();
  check = k1Bin[offset];
  BN_bin2bn(&k1Bin[offset],16,enc2);

  offset = 0;
  BN_lshift1(lenc2,enc2);
  BN_bn2bin(lenc2,k2Bin);
  if (check & 0x80) {
    offset = 1;
    k2Bin[15+offset] ^= 0x87;
  }
  BN_free(enc2);
  BN_free(lenc2);
  // padding
  if (length < 16) {
    memcpy(&data2[0],input,length);
    data2[length] = 0x80;
  }

  // k2 xor padded data
  for (int i = 0; i < 16; i++) {
    data2[i] = data2[i] ^ k2Bin[offset + i];
  }
  r = openssl_enc(alg, key, iv, data2, 16, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}

static int
aes128_encrypt_cmac(struct sc_card *card, const unsigned char *key, int keysize,
  const unsigned char *input, size_t length, unsigned char *output)
{
  size_t mactlen = 0;
  int r = SC_ERROR_INTERNAL;
#if OPENSSL_VERSION_NUMBER < 0x30000000L
  CMAC_CTX *ctx = CMAC_CTX_new();
  if (ctx == NULL) {
    return SC_ERROR_INTERNAL;
  }

  if (!CMAC_Init(ctx, key, keysize / 8, EVP_aes_128_cbc(), NULL)) {
    goto err;
  }
  if (!CMAC_Update(ctx, input, length)) {
    goto err;
  }
  if (!CMAC_Final(ctx, output, &mactlen)) {
    goto err;
  }
  r = SC_SUCCESS;
err:
  CMAC_CTX_free(ctx);
#else
  EVP_MAC *mac = EVP_MAC_fetch(card->ctx->ossl3ctx->libctx, "cmac", NULL);
  if (mac == NULL) {
    return r;
  }

  OSSL_PARAM params[2] = {0};
  params[0] = OSSL_PARAM_construct_utf8_string("cipher","aes-128-cbc", 0);
  params[1] = OSSL_PARAM_construct_end();

  EVP_MAC_CTX *ctx = EVP_MAC_CTX_new(mac);
  if (ctx == NULL) {
    EVP_MAC_CTX_free(ctx);
    sc_log_openssl(card->ctx);
    return r;
  }
  if (!EVP_MAC_init(ctx, (const unsigned char *)key, keysize / 8, params)) {
    sc_log_openssl(card->ctx);
    goto err;
  }
  if (!EVP_MAC_update(ctx, input, length)) {
    sc_log_openssl(card->ctx);
    goto err;
  }
  if (!EVP_MAC_final(ctx, output, &mactlen, 16)) {
    sc_log_openssl(card->ctx);
    goto err;
  }
  r = SC_SUCCESS;
err:
  EVP_MAC_CTX_free(ctx);
  EVP_MAC_free(mac);
#endif
  return r;
}

static int
aes128_encrypt_ecb(struct sc_card *card, const unsigned char *key, int keysize,
    const unsigned char *input, size_t length, unsigned char *output)
{
  unsigned char iv[EVP_MAX_IV_LENGTH] = {0};
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "AES-128-ECB");
  int r;
  r = openssl_enc(alg, key, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
aes128_encrypt_cbc(struct sc_card *card, const unsigned char *key, int keysize, unsigned char iv[16],
    const unsigned char *input, size_t length, unsigned char *output)
{
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "AES-128-CBC");
  int r;
  r = openssl_enc(alg, key, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
aes128_decrypt_cbc(struct sc_card *card, const unsigned char *key, int keysize, unsigned char iv[16],
    const unsigned char *input, size_t length, unsigned char *output)
{
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "AES-128-CBC");
  int r;
  r = openssl_dec(alg, key, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
des3_encrypt_ecb(struct sc_card *card, const unsigned char *key, int keysize,
    const unsigned char *input, int length, unsigned char *output)
{
  unsigned char iv[EVP_MAX_IV_LENGTH] = {0};
  unsigned char bKey[24] = {0};
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "DES-EDE3");
  int r;

  if (keysize == 16) {
    memcpy(&bKey[0], key, 16);
    memcpy(&bKey[16], key, 8);
  } else {
    memcpy(&bKey[0], key, 24);
  }

  r = openssl_enc(alg, bKey, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
des3_encrypt_cbc(struct sc_card *card, const unsigned char *key, int keysize, unsigned char iv[EVP_MAX_IV_LENGTH],
    const unsigned char *input, size_t length, unsigned char *output)
{
  unsigned char bKey[24] = {0};
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "DES-EDE3-CBC");
  int r;

  if (keysize == 16) {
    memcpy(&bKey[0], key, 16);
    memcpy(&bKey[16], key, 8);
  } else {
    memcpy(&bKey[0], key, 24);
  }

  r = openssl_enc(EVP_des_ede3_cbc(), bKey, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
des3_decrypt_cbc(struct sc_card *card, const unsigned char *key, int keysize, unsigned char iv[EVP_MAX_IV_LENGTH],
    const unsigned char *input, size_t length, unsigned char *output)
{
  unsigned char bKey[24] = {0};
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "DES-EDE3-CBC");
  int r;

  if (keysize == 16) {
    memcpy(&bKey[0], key, 16);
    memcpy(&bKey[16], key, 8);
  } else {
    memcpy(&bKey[0], key, 24);
  }

  r = openssl_dec(alg, bKey, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
des_encrypt_cbc(struct sc_card *card, const unsigned char *key, int keysize, unsigned char iv[EVP_MAX_IV_LENGTH],
    const unsigned char *input, size_t length, unsigned char *output)
{
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "DES-CBC");
  int r;

  r = openssl_enc(alg, key, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
des_decrypt_cbc(struct sc_card *card, const unsigned char *key, int keysize, unsigned char iv[EVP_MAX_IV_LENGTH],
    const unsigned char *input, size_t length, unsigned char *output)
{
  EVP_CIPHER *alg = sc_evp_cipher(card->ctx, "DES-CBC");
  int r;

  r = openssl_dec(alg, key, iv, input, length, output);
  sc_evp_cipher_free(alg);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
openssl_dig(const EVP_MD * digest, const unsigned char *input, size_t length,
    unsigned char *output)
{
  int r = 0;
  EVP_MD_CTX *ctx = NULL;
  unsigned outl = 0;

  ctx = EVP_MD_CTX_create();
  if (ctx == NULL) {
    r = SC_ERROR_OUT_OF_MEMORY;
    goto err;
  }

  EVP_MD_CTX_init(ctx);
  if (!EVP_DigestInit_ex(ctx, digest, NULL) ||
      !EVP_DigestUpdate(ctx, input, length)) {
    r = SC_ERROR_INTERNAL;
    goto err;
  }

  if (!EVP_DigestFinal_ex(ctx, output, &outl)) {
    r = SC_ERROR_INTERNAL;
    goto err;
  }
  r = SC_SUCCESS;
err:
  if (ctx)
    EVP_MD_CTX_destroy(ctx);

  return r;
}


static int
sha1_digest(struct sc_card *card, const unsigned char *input, size_t length, unsigned char *output)
{
  EVP_MD *md = sc_evp_md(card->ctx, "SHA1");
  int r;

  r = openssl_dig(md, input, length, output);
  sc_evp_md_free(md);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}

static int
sha256_digest(struct sc_card *card, const unsigned char *input, size_t length, unsigned char *output)
{
  EVP_MD *md = sc_evp_md(card->ctx, "SHA256");
  int r;

  r = openssl_dig(md, input, length, output);
  sc_evp_md_free(md);
  if (r != SC_SUCCESS)
    sc_log_openssl(card->ctx);
  return r;
}


static int
gen_init_key(struct sc_card *card, unsigned char *key_enc, unsigned char *key_mac,
    unsigned char *result, unsigned char key_type)
{
  int r;
  struct sc_apdu apdu;
  unsigned char data[256] = {0};
  unsigned char tmp_sm;
  unsigned char isFips;
  unsigned long blocksize = 0;
  unsigned char cryptogram[256] = {0}; /* host cryptogram */
  unsigned char iv[16] = {0};
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;
  isFips = exdata->bFipsCertification;

  LOG_FUNC_CALLED(card->ctx);

  if (1 != RAND_bytes(g_random, sizeof(g_random)))
    return SC_ERROR_INTERNAL;

  sc_format_apdu(card, &apdu, SC_APDU_CASE_4_SHORT, 0x50, 0x00, 0x00);
  apdu.cla = 0x80;
  apdu.lc = apdu.datalen = sizeof(g_random);
  apdu.data = g_random; /* host random */
  if (isFips)
    apdu.le = apdu.resplen = 29;
  else
    apdu.le = apdu.resplen = 28;

  apdu.resp = result; /* card random is result[12~19] */

  tmp_sm = exdata->sm;
  exdata->sm = SM_PLAIN;
  r = epass2003_transmit_apdu(card, &apdu);
  exdata->sm = tmp_sm;
  LOG_TEST_RET(card->ctx, r, "APDU gen_init_key failed");

  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "gen_init_key failed");

  /* Step 1 - Generate Derivation data */
  if (isFips) {
    memset(data, 0x00, 15);
    data[11] = 0x04;
    data[14] = 0x80;
    data[15] = 0x01;
    memcpy(&data[16], g_random, 8);
    memcpy(&data[24], &result[12 + 1], 8);
  } else {
    memcpy(data, &result[16], 4);
    memcpy(&data[4], g_random, 4);
    memcpy(&data[8], &result[12], 4);
    memcpy(&data[12], &g_random[4], 4);
  }

  /* Step 2,3 - Create S-ENC/S-MAC Session Key */
  if (KEY_TYPE_AES == key_type) {
    if (isFips) {
      r = aes128_encrypt_cmac(card, key_enc, 128, data, 32, exdata->sk_enc);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cmac enc failed");
      memset(&data[11], 0x06, 1);
      r = aes128_encrypt_cmac(card, key_mac, 128, data, 32, exdata->sk_mac);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cmac mac  failed");
    } else {
      r = aes128_encrypt_ecb(card, key_enc, 16, data, 16, exdata->sk_enc);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_ecb enc  failed");
      r = aes128_encrypt_ecb(card, key_mac, 16, data, 16, exdata->sk_mac);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_ecb mac  failed");
    }
  } else {
    r = des3_encrypt_ecb(card, key_enc, 16, data, 16, exdata->sk_enc);
    LOG_TEST_RET(card->ctx, r, "des3_encrypt_ecb failed");
    r = des3_encrypt_ecb(card, key_mac, 16, data, 16, exdata->sk_mac);
    LOG_TEST_RET(card->ctx, r, "des3_encrypt_ecb failed");
  }

  if (isFips) {
    data[11] = 0x00;
    data[14] = 0x40;
  } else {
    memcpy(data, g_random, 8);
    memcpy(&data[8], &result[12], 8);
    data[16] = 0x80;
    blocksize = (key_type == KEY_TYPE_AES ? 16 : 8);
    memset(&data[17], 0x00, blocksize - 1);
  }

  /* calculate host cryptogram */
  if (KEY_TYPE_AES == key_type) {
    if (isFips) {
      r = aes128_encrypt_cmac(card, exdata->sk_enc, 128, data, 32, cryptogram);
    } else {
      r = aes128_encrypt_cbc(card, exdata->sk_enc, 16, iv, data, 16 + blocksize, cryptogram);
    }
  } else {
    r = des3_encrypt_cbc(card, exdata->sk_enc, 16, iv, data, 16 + blocksize, cryptogram);
  }

  LOG_TEST_RET(card->ctx, r, "calculate host cryptogram failed");

  /* verify card cryptogram */
  if (isFips) {
    if (0 != memcmp(&cryptogram[0], &result[20+1], 8))
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_CARD_CMD_FAILED);
  } else {
    if (0 != memcmp(&cryptogram[16], &result[20], 8))
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_CARD_CMD_FAILED);
  }
  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
verify_init_key(struct sc_card *card, unsigned char *ran_key, unsigned char key_type)
{
  int r;
  struct sc_apdu apdu;
  unsigned long blocksize = (key_type == KEY_TYPE_AES ? 16 : 8);
  unsigned char data[256] = {0};
  unsigned char cryptogram[256] = {0}; /* host cryptogram */
  unsigned char iv[16] = {0};
  unsigned char mac[256] = {0};
  unsigned long i;
  unsigned char tmp_sm;
  unsigned char isFips;
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;
  exdata = (epass2003_exdata *)card->drv_data;
  isFips = exdata->bFipsCertification;

  LOG_FUNC_CALLED(card->ctx);

  if (isFips) {
    memset(data,0x00,15);
    data[11] = 0x01;
    data[14] = 0x40;
    data[15] = 0x01;
    memcpy(&data[16], g_random, 8);
    memcpy(&data[24], ran_key, 8);
  } else {
    memcpy(data, ran_key, 8);
    memcpy(&data[8], g_random, 8);
    data[16] = 0x80;
    memset(&data[17], 0x00, blocksize - 1);
    memset(iv, 0, 16);
  }

  /* calculate host cryptogram */
  if (KEY_TYPE_AES == key_type) {
    if (isFips) {
      r = aes128_encrypt_cmac(card, exdata->sk_enc, 128, data, 32, cryptogram);
    } else {
      r = aes128_encrypt_cbc(card, exdata->sk_enc, 16, iv, data, 16 + blocksize,cryptogram);
    }
  } else {
    r = des3_encrypt_cbc(card, exdata->sk_enc, 16, iv, data, 16 + blocksize,cryptogram);
  }

  LOG_TEST_RET(card->ctx, r, "calculate host cryptogram  failed");

  memset(data, 0, sizeof(data));
  memcpy(data, "\x84\x82\x03\x00\x10", 5);
  if (isFips) {
    memcpy(&data[5], &cryptogram[0], 8);
  } else {
    memcpy(&data[5], &cryptogram[16], 8);
    memcpy(&data[13], "\x80\x00\x00", 3);
  }

  /* calculate mac icv */
  memset(iv, 0x00, 16);
  if (KEY_TYPE_AES == key_type) {
    if (isFips) {
      r = aes128_encrypt_cmac(card, exdata->sk_mac, 128, data, 13, mac);
    } else {
      r = aes128_encrypt_cbc(card, exdata->sk_mac, 16, iv, data, 16, mac);
    }
    i = 0;
  } else {
    r = des3_encrypt_cbc(card, exdata->sk_mac, 16, iv, data, 16, mac);
    i = 8;
  }

  LOG_TEST_RET(card->ctx, r, "calculate mac icv failed");
  /* save mac icv */
  memset(exdata->icv_mac, 0x00, 16);
  memcpy(exdata->icv_mac, &mac[i], 8);

  /* verify host cryptogram */
  if (isFips) {
    memcpy(data, &cryptogram[0], 8);
  } else {
    memcpy(data, &cryptogram[16], 8);
  }
  memcpy(&data[8], &mac[i], 8);
  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0x82, 0x03, 0x00);
  apdu.cla = 0x84;
  apdu.lc = apdu.datalen = 16;
  apdu.data = data;
  tmp_sm = exdata->sm;
  exdata->sm = SM_PLAIN;
  r = epass2003_transmit_apdu(card, &apdu);
  exdata->sm = tmp_sm;
  LOG_TEST_RET(card->ctx, r, "APDU verify_init_key failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "verify_init_key failed");
  return r;
}


static int
mutual_auth(struct sc_card *card, unsigned char *key_enc,
      unsigned char *key_mac)
{
  struct sc_context *ctx = card->ctx;
  int r;
  unsigned char result[256] = {0};
  unsigned char ran_key[8] = {0};
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;
  exdata = (epass2003_exdata *)card->drv_data;

  LOG_FUNC_CALLED(ctx);

  r = gen_init_key(card, key_enc, key_mac, result, exdata->smtype);
  LOG_TEST_RET(ctx, r, "gen_init_key failed");
  if (exdata->bFipsCertification) {
    memcpy(ran_key, &result[12+1], 8);
  } else {
    memcpy(ran_key, &result[12], 8);
  }

  r = verify_init_key(card, ran_key, exdata->smtype);
  LOG_TEST_RET(ctx, r, "verify_init_key failed");

  LOG_FUNC_RETURN(ctx, r);
}


int
epass2003_refresh(struct sc_card *card)
{
  int r = SC_SUCCESS;
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  if (exdata->sm) {
    card->sm_ctx.sm_mode = 0;
    r = mutual_auth(card, g_init_key_enc, g_init_key_mac);
    card->sm_ctx.sm_mode = SM_MODE_TRANSMIT;
    LOG_TEST_RET(card->ctx, r, "mutual_auth failed");
  }

  return r;
}


/* Data(TLV)=0x87|L|0x01+Cipher */
static int
construct_data_tlv(struct sc_card *card, struct sc_apdu *apdu, unsigned char *apdu_buf,
    unsigned char *data_tlv, size_t * data_tlv_len, const unsigned char key_type)
{
  size_t block_size = (KEY_TYPE_AES == key_type ? 16 : 8);
  unsigned char pad[4096] = {0};
  size_t pad_len;
  size_t tlv_more;  /* increased tlv length */
  unsigned char iv[16] = {0};
  epass2003_exdata *exdata = NULL;
  int r = 0;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  /* we encrypt the pad buffer and then write it to the apdu_buf at offset block_size + tlv_more */
  if (apdu->lc >= sizeof(pad) - block_size - 5)
    LOG_TEST_RET(card->ctx, SC_ERROR_INVALID_DATA,
        "ePass2003 secure messaging APDU data too large");

  /* padding */
  apdu_buf[block_size] = 0x87;
  memcpy(pad, apdu->data, apdu->lc);
  pad[apdu->lc] = 0x80;
  if ((apdu->lc + 1) % block_size)
    pad_len = ((apdu->lc + 1) / block_size + 1) * block_size;
  else
    pad_len = apdu->lc + 1;

  /* encode Lc' */
  if (pad_len > 0x7E) {
    /* Lc' > 0x7E, use extended APDU */
    apdu_buf[block_size + 1] = 0x82;
    apdu_buf[block_size + 2] = (unsigned char)((pad_len + 1) / 0x100);
    apdu_buf[block_size + 3] = (unsigned char)((pad_len + 1) % 0x100);
    apdu_buf[block_size + 4] = 0x01;
    tlv_more = 5;
  } else {
    apdu_buf[block_size + 1] = (unsigned char)pad_len + 1;
    apdu_buf[block_size + 2] = 0x01;
    tlv_more = 3;
  }
  memcpy(data_tlv, &apdu_buf[block_size], tlv_more);

  /* encrypt Data */
  if (KEY_TYPE_AES == key_type) {
    r = aes128_encrypt_cbc(card, exdata->sk_enc, 16, iv, pad, pad_len, apdu_buf + block_size + tlv_more);
    LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cbc failed");
  } else {
    r = des3_encrypt_cbc(card, exdata->sk_enc, 16, iv, pad, pad_len, apdu_buf + block_size + tlv_more);
    LOG_TEST_RET(card->ctx, r, "des3_encrypt_cbc failed");
  }

  memcpy(data_tlv + tlv_more, apdu_buf + block_size + tlv_more, pad_len);
  *data_tlv_len = tlv_more + pad_len;
  return 0;
}


/* Le(TLV)=0x97|L|Le */
static int
construct_le_tlv(struct sc_apdu *apdu, unsigned char *apdu_buf, size_t data_tlv_len,
    unsigned char *le_tlv, size_t * le_tlv_len, const unsigned char key_type)
{
  size_t block_size = (KEY_TYPE_AES == key_type ? 16 : 8);

  *(apdu_buf + block_size + data_tlv_len) = 0x97;
  if (apdu->le > 0x7F) {
    /* Le' > 0x7E, use extended APDU */
    *(apdu_buf + block_size + data_tlv_len + 1) = 2;
    *(apdu_buf + block_size + data_tlv_len + 2) = (unsigned char)(apdu->le / 0x100);
    *(apdu_buf + block_size + data_tlv_len + 3) = (unsigned char)(apdu->le % 0x100);
    memcpy(le_tlv, apdu_buf + block_size + data_tlv_len, 4);
    *le_tlv_len = 4;
  } else {
    *(apdu_buf + block_size + data_tlv_len + 1) = 1;
    *(apdu_buf + block_size + data_tlv_len + 2) = (unsigned char)apdu->le;
    memcpy(le_tlv, apdu_buf + block_size + data_tlv_len, 3);
    *le_tlv_len = 3;
  }
  return 0;
}


/* MAC(TLV)=0x8e|0x08|MAC */
static int
construct_mac_tlv(struct sc_card *card, unsigned char *apdu_buf, size_t data_tlv_len, size_t le_tlv_len,
    unsigned char *mac_tlv, size_t * mac_tlv_len, const unsigned char key_type)
{
  size_t block_size = (KEY_TYPE_AES == key_type ? 16 : 8);
  unsigned char mac[4096] = {0};
  size_t mac_len;
  unsigned char icv[16] = {0};
  int r ;
  int i = (KEY_TYPE_AES == key_type ? 15 : 7);
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  if (data_tlv_len + le_tlv_len + block_size + 1 > sizeof(mac)) {
    return SC_ERROR_BUFFER_TOO_SMALL;
  }

  if (0 == data_tlv_len && 0 == le_tlv_len) {
    mac_len = block_size;
  } else {
    /* padding */
    *(apdu_buf + block_size + data_tlv_len + le_tlv_len) = 0x80;
    if ((data_tlv_len + le_tlv_len + 1) % block_size) {
      mac_len = (((data_tlv_len + le_tlv_len + 1) / block_size) +
          1) * block_size + block_size;
    } else {
      mac_len = data_tlv_len + le_tlv_len + 1 + block_size;
    }
    memset((apdu_buf + block_size + data_tlv_len + le_tlv_len + 1),
           0, (mac_len - (data_tlv_len + le_tlv_len + 1)));
  }

  /* increase icv */
  for (; i >= 0; i--) {
    if (exdata->icv_mac[i] == 0xff) {
      exdata->icv_mac[i] = 0;
    } else {
      exdata->icv_mac[i]++;
      break;
    }
  }

  /* calculate MAC */
  memset(icv, 0, sizeof(icv));
  memcpy(icv, exdata->icv_mac, 16);
  if (KEY_TYPE_AES == key_type) {
    if (exdata->bFipsCertification) {
      for (int i = 0; i < 16; i++) {
        apdu_buf[i] = apdu_buf[i] ^ icv[i];
      }
      r = aes128_encrypt_cmac(card, exdata->sk_mac, 128, apdu_buf, data_tlv_len + le_tlv_len + block_size, mac);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cmac failed");
      memcpy(mac_tlv + 2, &mac[0 /*ulmacLen-16*/], 8);
      for (int j = 0; j < 4; j++) {
        apdu_buf[j] = apdu_buf[j] ^ icv[j];
      }
    } else {
      r = aes128_encrypt_cbc(card, exdata->sk_mac, 16, icv, apdu_buf, mac_len, mac);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cbc failed");
      memcpy(mac_tlv + 2, &mac[mac_len - 16], 8);
    }
  } else {
    unsigned char iv[EVP_MAX_IV_LENGTH] = {0};
    unsigned char tmp[8] = {0};
    r = des_encrypt_cbc(card, exdata->sk_mac, 8, icv, apdu_buf, mac_len, mac);
    LOG_TEST_RET(card->ctx, r, "des_encrypt_cbc 1 failed");
    r = des_decrypt_cbc(card, &exdata->sk_mac[8], 8, iv, &mac[mac_len - 8], 8, tmp);
    LOG_TEST_RET(card->ctx, r, "des_decrypt_cbc failed");
    memset(iv, 0x00, sizeof iv);
    r = des_encrypt_cbc(card, exdata->sk_mac, 8, iv, tmp, 8, mac_tlv + 2);
    LOG_TEST_RET(card->ctx, r, "des_encrypt_cbc 2 failed");
  }

  *mac_tlv_len = 2 + 8;
  return 0;
}

/* MAC(TLV case 1) */
static int
construct_mac_tlv_case1(struct sc_card *card, unsigned char *apdu_buf, size_t data_tlv_len, size_t le_tlv_len,
  unsigned char *mac_tlv, size_t * mac_tlv_len, const unsigned char key_type)
{
  int r;
  size_t block_size = 4;
  unsigned char mac[4096] = {0};
  size_t mac_len;
  int i = (KEY_TYPE_AES == key_type ? 15 : 7);
  unsigned char icv[16] = {0};

  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  if (data_tlv_len + le_tlv_len + block_size + 1 > sizeof(mac)) {
    return SC_ERROR_BUFFER_TOO_SMALL;
  }

  if (0 == data_tlv_len && 0 == le_tlv_len) {
    mac_len = block_size;
  } else {
    /* padding */
    *(apdu_buf + block_size + data_tlv_len + le_tlv_len) = 0x80;
    if ((data_tlv_len + le_tlv_len + 1) % block_size) {
      mac_len = (((data_tlv_len + le_tlv_len + 1) / block_size) + 1) * block_size + block_size;
    } else {
      mac_len = data_tlv_len + le_tlv_len + 1 + block_size;
    }
  }
  /* increase icv */
  for (; i >= 0; i--) {
    if (exdata->icv_mac[i] == 0xff) {
      exdata->icv_mac[i] = 0;
    } else {
      exdata->icv_mac[i]++;
      break;
    }
  }

  /* calculate MAC */
  memset(icv, 0, sizeof(icv));
  memcpy(icv, exdata->icv_mac, 16);
  if (KEY_TYPE_AES == key_type) {
    if (exdata->bFipsCertification) {
      r = aes128_encrypt_cmac_ft(card, exdata->sk_mac, 128, apdu_buf, data_tlv_len + le_tlv_len + block_size, mac, &icv[0]);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cmac_ft failed");
      memcpy(mac_tlv + 2, &mac[0 /*ulmacLen-16*/], 8);
    } else {
      if (mac_len < 16)
        LOG_TEST_RET(card->ctx, SC_ERROR_INTERNAL, "incorrect mac length");
      r = aes128_encrypt_cbc(card, exdata->sk_mac, 16, icv, apdu_buf, mac_len, mac);
      LOG_TEST_RET(card->ctx, r, "aes128_encrypt_cbc failed");
      memcpy(mac_tlv + 2, &mac[mac_len - 16], 8);
    }
  } else {
    unsigned char iv[EVP_MAX_IV_LENGTH] = {0};
    unsigned char tmp[8] = {0};
    if (mac_len < 8)
      LOG_TEST_RET(card->ctx, SC_ERROR_INTERNAL, "incorrect mac length");
    r = des_encrypt_cbc(card, exdata->sk_mac, 8, icv, apdu_buf, mac_len, mac);
    LOG_TEST_RET(card->ctx, r, "des_encrypt_cbc  failed");
    r = des_decrypt_cbc(card, &exdata->sk_mac[8], 8, iv, &mac[mac_len - 8], 8, tmp);
    LOG_TEST_RET(card->ctx, r, "des_decrypt_cbc failed");
    memset(iv, 0x00, sizeof iv);
    r = des_encrypt_cbc(card, exdata->sk_mac, 8, iv, tmp, 8, mac_tlv + 2);
    LOG_TEST_RET(card->ctx, r, "des_encrypt_cbc failed");
  }

  *mac_tlv_len = 2 + 8;
  return 0;
}

/* According to GlobalPlatform Card Specification's SCP01
 * encode APDU from
 * CLA INS P1 P2 [Lc] Data [Le]
 * to
 * CLA INS P1 P2 Lc' Data' [Le]
 * where
 * Data'=Data(TLV)+Le(TLV)+MAC(TLV) */
static int
encode_apdu(struct sc_card *card, struct sc_apdu *plain, struct sc_apdu *sm,
    unsigned char *apdu_buf, size_t * apdu_buf_len)
{
  size_t block_size = 0;
  unsigned char dataTLV[4096] = {0};
  size_t data_tlv_len = 0;
  unsigned char le_tlv[256] = {0};
  size_t le_tlv_len = 0;
  size_t mac_tlv_len = 10;
  size_t tmp_lc = 0;
  size_t tmp_le = 0;
  size_t expected_total_len;
  unsigned char mac_tlv[256] = {0};
  epass2003_exdata *exdata = NULL;

  mac_tlv[0] = 0x8E;
  mac_tlv[1] = 8;
  /* size_t plain_le = 0; */
  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;
  exdata = (epass2003_exdata*)card->drv_data;
  block_size = (KEY_TYPE_DES == exdata->smtype ? 16 : 8);

  sm->cse = SC_APDU_CASE_4_SHORT;
  apdu_buf[0] = (unsigned char)plain->cla;
  apdu_buf[1] = (unsigned char)plain->ins;
  apdu_buf[2] = (unsigned char)plain->p1;
  apdu_buf[3] = (unsigned char)plain->p2;
  /* plain_le = plain->le; */
  /* padding */
  if (exdata->bFipsCertification && plain->lc == 0 && apdu_buf[1] == 0x82 && apdu_buf[2] == 0x01) {
    apdu_buf[4] = 0x00;
  } else {
    apdu_buf[4] = 0x80;
  }
  memset(&apdu_buf[5], 0x00, block_size - 5);

  /* Data -> Data' */
  if (plain->lc != 0)
    if (0 != construct_data_tlv(card, plain, apdu_buf, dataTLV, &data_tlv_len, exdata->smtype))
      return -1;

  if (plain->le != 0 || (plain->le == 0 && plain->resplen != 0))
    if (0 != construct_le_tlv(plain, apdu_buf, data_tlv_len, le_tlv,
             &le_tlv_len, exdata->smtype))
      return -1;

  if (exdata->bFipsCertification && plain->lc == 0 && apdu_buf[1] == 0x82 && apdu_buf[2] == 0x01) {
    if (0 != construct_mac_tlv_case1(card, apdu_buf, data_tlv_len, le_tlv_len, mac_tlv, &mac_tlv_len, exdata->smtype))
      return -1;
  } else {
    if (0 != construct_mac_tlv(card, apdu_buf, data_tlv_len, le_tlv_len, mac_tlv, &mac_tlv_len, exdata->smtype))
      return -1;
  }

  memset(apdu_buf + 4, 0, *apdu_buf_len - 4);
  sm->lc = sm->datalen = data_tlv_len + le_tlv_len + mac_tlv_len;
  if (sm->lc > 0xFF) {
    sm->cse = SC_APDU_CASE_4_EXT;
    apdu_buf[4] = (unsigned char)((sm->lc) / 0x10000);
    apdu_buf[5] = (unsigned char)(((sm->lc) / 0x100) % 0x100);
    apdu_buf[6] = (unsigned char)((sm->lc) % 0x100);
    tmp_lc = 3;
  } else {
    apdu_buf[4] = (unsigned char)sm->lc;
    tmp_lc = 1;
  }

  /* 2 is for Le extension in the worst case */
  expected_total_len = 4 + tmp_lc + data_tlv_len + le_tlv_len + mac_tlv_len + 2;

  if (expected_total_len > *apdu_buf_len) {
      return SC_ERROR_BUFFER_TOO_SMALL;
  }

  memcpy(apdu_buf + 4 + tmp_lc, dataTLV, data_tlv_len);
  memcpy(apdu_buf + 4 + tmp_lc + data_tlv_len, le_tlv, le_tlv_len);
  memcpy(apdu_buf + 4 + tmp_lc + data_tlv_len + le_tlv_len, mac_tlv, mac_tlv_len);
  memcpy((unsigned char *)sm->data, apdu_buf + 4 + tmp_lc, sm->datalen);
  *apdu_buf_len = 0;

  if (4 == le_tlv_len) {
    sm->cse = SC_APDU_CASE_4_EXT;
    *(apdu_buf + 4 + tmp_lc + sm->lc) = (unsigned char)(plain->le / 0x100);
    *(apdu_buf + 4 + tmp_lc + sm->lc + 1) = (unsigned char)(plain->le % 0x100);
    tmp_le = 2;
  } else if (3 == le_tlv_len) {
    *(apdu_buf + 4 + tmp_lc + sm->lc) = (unsigned char)plain->le;
    tmp_le = 1;
  }

  *apdu_buf_len += 4 + tmp_lc + data_tlv_len + le_tlv_len + mac_tlv_len + tmp_le;
  /* sm->le = calc_le(plain_le); */
  return 0;
}


static int
epass2003_sm_wrap_apdu(struct sc_card *card, struct sc_apdu *plain, struct sc_apdu *sm)
{
  unsigned char buf[4096] = {0}; /* APDU buffer */
  size_t buf_len = sizeof(buf);
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  LOG_FUNC_CALLED(card->ctx);

  if (exdata->sm)
    plain->cla |= 0x0C;

  sm->cse = plain->cse;
  sm->cla = plain->cla;
  sm->ins = plain->ins;
  sm->p1 = plain->p1;
  sm->p2 = plain->p2;
  sm->lc = plain->lc;
  sm->le = plain->le;
  sm->control = plain->control;
  sm->flags = plain->flags;

  switch (sm->cla & 0x0C) {
  case 0x00:
  case 0x04:
    sm->datalen = plain->datalen;
    memcpy((void *)sm->data, plain->data, plain->datalen);
    sm->resplen = plain->resplen;
    memcpy(sm->resp, plain->resp, plain->resplen);
    break;
  case 0x0C:
    memset(buf, 0, sizeof(buf));
    if (0 != encode_apdu(card, plain, sm, buf, &buf_len))
      return SC_ERROR_CARD_CMD_FAILED;
    break;
  default:
    return SC_ERROR_INCORRECT_PARAMETERS;
  }

  return SC_SUCCESS;
}

static int
epass2003_check_response_mac_and_sw(struct sc_card *card, struct sc_apdu *sm)
{
  unsigned char iv[16];
  unsigned char *data = NULL, *mac = NULL;
  size_t blocksize, mac_len;
  int ret = -1;
  size_t taglen;
  const u8 *tag;
  epass2003_exdata *exdata;
  unsigned char *in = sm->resp;
  unsigned char *alt_in;
  size_t inlen = sm->resplen;
  size_t len_correction;

  /* card/ctx/drv_data is already checked by caller */
  exdata = (epass2003_exdata *)card->drv_data;

  /* The SM must contain at least TLV encoded SW and MAC fields. */
  if (inlen < 14 )
    return ret;

  /* compare BER-TLV encoded SW (TAG 0x99) and raw SW */
  alt_in = in;
  tag = sc_asn1_find_tag(card->ctx, alt_in, inlen, 0x99, &taglen);
  if (tag == NULL || taglen != 2) {
    /*
     * It seems that the EPASS2003 firmware has some problem with BER-TLV encoding.
     * Instead of (correct) TLV 87 81 81 [01 .. ..] incorrect TLV 87 81 [01 .. ..]
     * is returned. There seems to be some proprietary fix for the faulty encoding
     * in the decrypt_response() function, similar fix here:
     */
    if (0x01 == in[2] && 0x82 != in[1]) {
      sc_log(card->ctx, "Workaround, wrong BER-TLV ?");
      len_correction = in[1] + 2;
      if (inlen < len_correction)
        return ret;
      inlen -= len_correction;
      alt_in += len_correction;
      tag = sc_asn1_find_tag(card->ctx, alt_in, inlen, 0x99, &taglen);
      if (tag == NULL || taglen != 2)
        return ret;
    } else {
      return ret;
    }
  }
  if (sm->sw1 != tag[0] || sm->sw2 != tag[1])
    return ret;

  /* no documentation/real hardware to test, the response is accepted without MAC check */
  if (exdata->bFipsCertification) {
    sc_log(card->ctx, "Warning, MAC is not checked");
    return 0;
  }
  tag = sc_asn1_find_tag(card->ctx, alt_in, inlen, 0x8e, &taglen);
  if (tag == NULL || taglen != 8)
    return ret;

  if (KEY_TYPE_AES == exdata->smtype)
    blocksize = 16;
  else
    blocksize = 8;

  mac_len = tag - in - 2;
  if (NULL == (data = calloc(1, mac_len + blocksize)))
    goto end;
  if (NULL == (mac = malloc(mac_len + blocksize)))
    goto end;

  /* copy response to buffer and append padding */
  memcpy(data, in, mac_len);
  data[mac_len++] = 0x80;

  if (mac_len % blocksize)
    mac_len += (blocksize - (mac_len % blocksize));

  /* calculate MAC */
  memcpy(iv, exdata->icv_mac, blocksize);

  if (KEY_TYPE_AES == exdata->smtype) {
    if (aes128_encrypt_cbc(card, exdata->sk_mac, 16, iv, data, mac_len, mac))
      goto end;
  } else {
    uint8_t tmp[8];
    uint8_t iv0[EVP_MAX_IV_LENGTH];
    if (des_encrypt_cbc(card, exdata->sk_mac, 8, iv, data, mac_len, mac))
      goto end;
    memset(iv0, 0, EVP_MAX_IV_LENGTH);
    if (des_decrypt_cbc(card, &exdata->sk_mac[8], 8, iv0, &mac[mac_len - 8], 8, tmp))
      goto end;
    memset(iv0, 0, EVP_MAX_IV_LENGTH);
    if (des_encrypt_cbc(card, exdata->sk_mac, 8, iv0, tmp, 8, &mac[mac_len - 8]))
      goto end;
  }
  /* compare MAC */
  if (!memcmp(tag, mac + mac_len - blocksize, 8))
    ret = 0;
end:
  if (data)
    free(data);
  if (mac)
    free(mac);
  return ret;
}

/* According to GlobalPlatform Card Specification's SCP01
 * decrypt APDU response from
 * ResponseData' SW1 SW2
 * to
 * ResponseData SW1 SW2
 * where
 * ResponseData'=Data(TLV)+SW12(TLV)+MAC(TLV)
 * where
 * Data(TLV)=0x87|L|Cipher
 * SW12(TLV)=0x99|0x02|SW1+SW2
 * MAC(TLV)=0x8e|0x08|MAC */
static int
decrypt_response(struct sc_card *card, unsigned char *in, size_t inlen, unsigned char *out, size_t * out_len)
{
  unsigned int cla = 0, tag = 0;
  const unsigned char *p = in;
  size_t cipher_len;
  unsigned char iv[16] = {0};
  unsigned char plaintext[4096] = {0};
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  if (SC_SUCCESS != sc_asn1_read_tag(&p, inlen, &cla, &tag, &cipher_len) || p == NULL) {
    return -1;
  }
  if ((cla | tag) == 0x99)
    return 0;
  if ((cla | tag) != 0x87)
    return -1;

  if (cipher_len < 2 || cipher_len > sizeof plaintext)
    return -1;

  /* Skip the 0x01 separator between tag and ciphertext */
  p++;
  /* decrypt */
  if (KEY_TYPE_AES == exdata->smtype)
    aes128_decrypt_cbc(card, exdata->sk_enc, 16, iv, p, cipher_len - 1, plaintext);
  else
    des3_decrypt_cbc(card, exdata->sk_enc, 16, iv, p, cipher_len - 1, plaintext);

  /* unpadding */
  while (0x80 != plaintext[cipher_len - 2] && (cipher_len > 2))
    cipher_len--;

  if (2 == cipher_len || *out_len < cipher_len - 2)
    return -1;

  memcpy(out, plaintext, cipher_len - 2);
  *out_len = cipher_len - 2;
  return 0;
}


static int
epass2003_sm_unwrap_apdu(struct sc_card *card, struct sc_apdu *sm, struct sc_apdu *plain)
{
  int r;
  size_t len = 0;
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  LOG_FUNC_CALLED(card->ctx);

  /* verify MAC, and check if SW1,2 match SW1,2 encapsulated in SM */
  if (exdata->sm) {
    if (epass2003_check_response_mac_and_sw(card, sm)) {
      sc_log(card->ctx, "MAC or SW incorrect");
      return SC_ERROR_CARD_CMD_FAILED;
    }
  }
  r = sc_check_sw(card, sm->sw1, sm->sw2);
  if (r == SC_SUCCESS) {
    if (exdata->sm) {
      len = plain->resplen;
      if (0 != decrypt_response(card, sm->resp, sm->resplen, plain->resp, &len))
        return SC_ERROR_CARD_CMD_FAILED;
    } else {
      memcpy(plain->resp, sm->resp, sm->resplen);
      len = sm->resplen;
    }
  }

  plain->resplen = len;
  plain->sw1 = sm->sw1;
  plain->sw2 = sm->sw2;

  sc_log(card->ctx,
         "unwrapped APDU: resplen %"SC_FORMAT_LEN_SIZE_T"u, SW %02X%02X",
         plain->resplen, plain->sw1, plain->sw2);
  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
epass2003_sm_free_wrapped_apdu(struct sc_card *card,
    struct sc_apdu *plain, struct sc_apdu **sm_apdu)
{
  struct sc_context *ctx = card->ctx;
  int rv = SC_SUCCESS;

  LOG_FUNC_CALLED(ctx);
  if (!sm_apdu)
    LOG_FUNC_RETURN(ctx, SC_ERROR_INVALID_ARGUMENTS);
  if (!(*sm_apdu))
    LOG_FUNC_RETURN(ctx, SC_SUCCESS);


  if (plain)
    rv = epass2003_sm_unwrap_apdu(card, *sm_apdu, plain);

  if ((*sm_apdu)->data) {
    unsigned char * p = (unsigned char *)((*sm_apdu)->data);
    free(p);
  }
  if ((*sm_apdu)->resp) {
    free((*sm_apdu)->resp);
  }

  free(*sm_apdu);
  *sm_apdu = NULL;

  LOG_FUNC_RETURN(ctx, rv);
}


static int
epass2003_sm_get_wrapped_apdu(struct sc_card *card,
    struct sc_apdu *plain, struct sc_apdu **sm_apdu)
{
  struct sc_context *ctx = card->ctx;
  struct sc_apdu *apdu = NULL;
  int rv;

  LOG_FUNC_CALLED(ctx);
  if (!plain || !sm_apdu)
    LOG_FUNC_RETURN(ctx, SC_ERROR_INVALID_ARGUMENTS);

  *sm_apdu = NULL;
  //construct new SM apdu from original apdu
  apdu = calloc(1, sizeof(struct sc_apdu));
  if (!apdu) {
    rv = SC_ERROR_OUT_OF_MEMORY;
    goto err;
  }
  apdu->data = calloc (1, SC_MAX_EXT_APDU_BUFFER_SIZE);
  if (!apdu->data) {
    rv = SC_ERROR_OUT_OF_MEMORY;
    goto err;
  }
  apdu->resp = calloc (1, SC_MAX_EXT_APDU_BUFFER_SIZE);
  if (!apdu->resp) {
    rv = SC_ERROR_OUT_OF_MEMORY;
    goto err;
  }
  apdu->datalen = SC_MAX_EXT_APDU_BUFFER_SIZE;
  apdu->resplen = SC_MAX_EXT_APDU_BUFFER_SIZE;

  rv = epass2003_sm_wrap_apdu(card, plain, apdu);
  if (rv) {
    rv = epass2003_sm_free_wrapped_apdu(card, NULL, &apdu);
    if (rv < 0)
      goto err;
  }

  *sm_apdu = apdu;
  apdu = NULL;
err:
  if (apdu) {
    free((unsigned char *) apdu->data);
    free(apdu->resp);
    free(apdu);
    apdu = NULL;
  }
  LOG_FUNC_RETURN(ctx, rv);
}


static int
epass2003_transmit_apdu(struct sc_card *card, struct sc_apdu *apdu)
{
  int r;

  LOG_FUNC_CALLED(card->ctx);

  r = sc_transmit_apdu_t(card, apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");

  return r;
}


static int
get_data(struct sc_card *card, unsigned char type, unsigned char *data, size_t datalen)
{
  int r;
  struct sc_apdu apdu;
  unsigned char resp[SC_MAX_APDU_BUFFER_SIZE] = {0};
  size_t resplen = SC_MAX_APDU_BUFFER_SIZE;
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  LOG_FUNC_CALLED(card->ctx);

  sc_format_apdu(card, &apdu, SC_APDU_CASE_2_SHORT, 0xca, 0x01, type);
  apdu.resp = resp;
  apdu.le = 0;
  apdu.resplen = resplen;
  if (0x86 == type) {
    /* No SM temporarily */
    unsigned char tmp_sm = exdata->sm;
    exdata->sm = SM_PLAIN;
    r = sc_transmit_apdu(card, &apdu);
    exdata->sm = tmp_sm;
  } else {
    r = sc_transmit_apdu_t(card, &apdu);
  }
  LOG_TEST_RET(card->ctx, r, "APDU get_data failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "get_data failed");

  memcpy(data, resp, datalen);
  return r;
}

/* card driver functions */

static int epass2003_match_card(struct sc_card *card)
{
  int r;

  LOG_FUNC_CALLED(card->ctx);
  r = _sc_match_atr(card, epass2003_atrs, &card->type);
  if (r < 0)
    return 0;

  return 1;
}


static int
epass2003_init(struct sc_card *card)
{
  unsigned int flags;
  unsigned int ext_flags;
  unsigned char data[SC_MAX_APDU_BUFFER_SIZE] = {0};
  size_t datalen = SC_MAX_APDU_BUFFER_SIZE;
  epass2003_exdata *exdata = NULL;
  void *old_drv_data = card->drv_data;

  LOG_FUNC_CALLED(card->ctx);

  card->name = "epass2003";
  card->cla = 0x00;
  exdata = (epass2003_exdata *)calloc(1, sizeof(epass2003_exdata));
  if (!exdata)
    return SC_ERROR_OUT_OF_MEMORY;

  card->drv_data = exdata;

  exdata->sm = SM_SCP01;

  /* decide FIPS/Non-FIPS mode */
  if (SC_SUCCESS != get_data(card, 0x86, data, datalen)) {
    free(exdata);
    card->drv_data = old_drv_data;
    return SC_ERROR_INVALID_CARD;
  }

  if (memcmp(&data[32], "\x87\x01\x01", 3) == 0 && memcmp(&data[0], "\x80\x01\x01", 3) == 0) {
    exdata->bFipsCertification = 0x01;
  } else {
    exdata->bFipsCertification = 0x00;
  }

  if (0x01 == data[2])
    exdata->smtype = KEY_TYPE_AES;
  else
    exdata->smtype = KEY_TYPE_DES;

  if (0x84 == data[14]) {
    if (0x00 == data[16]) {
      exdata->sm = SM_PLAIN;
    }
  }

  /* mutual authentication */
  card->max_recv_size = 0xD8;
  card->max_send_size = 0xE8;

  card->sm_ctx.ops.open = epass2003_refresh;
  card->sm_ctx.ops.get_sm_apdu = epass2003_sm_get_wrapped_apdu;
  card->sm_ctx.ops.free_sm_apdu = epass2003_sm_free_wrapped_apdu;

  /* FIXME (VT): rather then set/unset 'g_sm', better to implement filter for APDUs to be wrapped */
  epass2003_refresh(card);

  card->sm_ctx.sm_mode = SM_MODE_TRANSMIT;

  flags = SC_ALGORITHM_ONBOARD_KEY_GEN | SC_ALGORITHM_RSA_RAW | SC_ALGORITHM_RSA_HASH_NONE;

  _sc_card_add_rsa_alg(card, 512, flags, 0);
  _sc_card_add_rsa_alg(card, 768, flags, 0);
  _sc_card_add_rsa_alg(card, 1024, flags, 0);
  _sc_card_add_rsa_alg(card, 2048, flags, 0);

  //set EC Alg Flags
  flags = SC_ALGORITHM_ONBOARD_KEY_GEN|SC_ALGORITHM_ECDSA_HASH_SHA1|SC_ALGORITHM_ECDSA_HASH_SHA256|SC_ALGORITHM_ECDSA_HASH_NONE|SC_ALGORITHM_ECDSA_RAW;
  ext_flags = 0;
  _sc_card_add_ec_alg(card, 256, flags, ext_flags, NULL);

  card->caps = SC_CARD_CAP_RNG | SC_CARD_CAP_APDU_EXT;

  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}

static int
epass2003_finish(sc_card_t *card)
{
  epass2003_exdata *exdata = (epass2003_exdata *)card->drv_data;

  if (exdata)
    free(exdata);
  return SC_SUCCESS;
}

/* COS implement SFI as lower 5 bits of FID, and not allow same SFI at the
 * same DF, so use hook functions to increase/decrease FID by 0x20 */
static int
epass2003_hook_path(struct sc_path *path, int inc)
{
  u8 fid_h = 0;
  u8 fid_l = 0;

  if (!path || path->len < 2)
    return -1;
  fid_h = path->value[path->len - 2];
  fid_l = path->value[path->len - 1];

  switch (fid_h) {
  case 0x29:
  case 0x30:
  case 0x31:
  case 0x32:
  case 0x33:
  case 0x34:
    if (inc)
      fid_l = fid_l * FID_STEP;
    else
      fid_l = fid_l / FID_STEP;
    path->value[path->len - 1] = fid_l;
    return 1;
  default:
    break;
  }
  return 0;
}


static int
epass2003_hook_file(struct sc_file *file, int inc)
{
  int fidl = file->id & 0xff;
  int fidh = file->id & 0xff00;
  int rv = 0;

  rv = epass2003_hook_path(&file->path, inc);

  if (rv > 0) {
    if (inc)
      file->id = fidh + fidl * FID_STEP;
    else
      file->id = fidh + fidl / FID_STEP;
  }
  if (rv < 0)
    return rv;
  return SC_SUCCESS;
}


static int
epass2003_select_fid_(struct sc_card *card, sc_path_t * in_path, sc_file_t ** file_out)
{
  struct sc_apdu apdu;
  u8 buf[SC_MAX_APDU_BUFFER_SIZE] = {0};
  u8 pathbuf[SC_MAX_PATH_SIZE], *path = pathbuf;
  int r;
  size_t pathlen;
  sc_file_t *file = NULL;

  r = epass2003_hook_path(in_path, 1);
  LOG_TEST_RET(card->ctx, r, "Can not hook path");

  memcpy(path, in_path->value, in_path->len);
  pathlen = in_path->len;

  sc_format_apdu(card, &apdu, SC_APDU_CASE_4_SHORT, 0xA4, 0x00, 0x00);

  switch (in_path->type) {
  case SC_PATH_TYPE_FILE_ID:
    apdu.p1 = 0;
    if (pathlen != 2)
      return SC_ERROR_INVALID_ARGUMENTS;
    break;
  default:
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_ARGUMENTS);
  }
  apdu.p2 = 0;    /* first record, return FCI */
  apdu.lc = pathlen;
  apdu.data = path;
  apdu.datalen = pathlen;

  if (file_out != NULL) {
    apdu.resp = buf;
    apdu.resplen = sizeof(buf);
    apdu.le = 0;
  } else {
    apdu.cse = (apdu.lc == 0) ? SC_APDU_CASE_1 : SC_APDU_CASE_3_SHORT;
  }

  if (path[0] == 0x29) { /* TODO:0x29 accords with FID prefix in profile  */
    /* Not allowed to select private key file, so fake fci. */
    /* 62 16 82 02 11 00 83 02 29 00 85 02 08 00 86 08 FF 90 90 90 FF FF FF FF */
    apdu.resplen = 0x18;
    memcpy(apdu.resp,
           "\x6f\x16\x82\x02\x11\x00\x83\x02\x29\x00\x85\x02\x08\x00\x86\x08\xff\x90\x90\x90\xff\xff\xff\xff",
           apdu.resplen);
    apdu.resp[9] = path[1];
    apdu.sw1 = 0x90;
    apdu.sw2 = 0x00;
  }
  else {
    r = sc_transmit_apdu_t(card, &apdu);
    LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  }

  if (file_out == NULL) {
    if (apdu.sw1 == 0x61)
      LOG_FUNC_RETURN(card->ctx, 0);
    LOG_FUNC_RETURN(card->ctx, sc_check_sw(card, apdu.sw1, apdu.sw2));
  }

  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  if (r)
    LOG_FUNC_RETURN(card->ctx, r);
  if (apdu.resplen < 2)
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_UNKNOWN_DATA_RECEIVED);

  switch (apdu.resp[0]) {
  case 0x6F:
    file = sc_file_new();
    if (file == NULL)
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_OUT_OF_MEMORY);
    file->path = *in_path;
    if (card->ops->process_fci == NULL) {
      sc_file_free(file);
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_NOT_SUPPORTED);
    }

    if ((size_t) apdu.resp[1] + 2 <= apdu.resplen)
      card->ops->process_fci(card, file, apdu.resp + 2, apdu.resp[1]);
    epass2003_hook_file(file, 0);
    *file_out = file;
    break;
  case 0x00:    /* proprietary coding */
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_UNKNOWN_DATA_RECEIVED);
    break;
  default:
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_UNKNOWN_DATA_RECEIVED);
  }
  return 0;
}


static int
epass2003_select_fid(struct sc_card *card, unsigned int id_hi, unsigned int id_lo,
    sc_file_t ** file_out)
{
  int r;
  sc_file_t *file = NULL;
  sc_path_t path;

  memset(&path, 0, sizeof(path));
  path.type = SC_PATH_TYPE_FILE_ID;
  path.value[0] = id_hi;
  path.value[1] = id_lo;
  path.len = 2;

  r = epass2003_select_fid_(card, &path, &file);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");

  if (file_out) {
    *file_out = file;
  } else {
    sc_file_free(file);
  }

  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
epass2003_select_aid(struct sc_card *card, const sc_path_t * in_path, sc_file_t ** file_out)
{
  int r = 0;

  r = iso_ops->select_file(card, in_path, file_out);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");

  if (file_out) {
    sc_file_t *file = *file_out;

    file->type = SC_FILE_TYPE_DF;
    file->ef_structure = SC_FILE_EF_UNKNOWN;
    file->path.len = 0;
    file->size = 0;
    /* AID */
    memcpy(file->name, in_path->value, in_path->len);
    file->namelen = in_path->len;
    file->id = 0x0000;
  }

  LOG_FUNC_RETURN(card->ctx, r);
}


static int
epass2003_select_path(struct sc_card *card, const u8 pathbuf[16], const size_t len,
    sc_file_t ** file_out)
{
  u8 n_pathbuf[SC_MAX_PATH_SIZE];
  const u8 *path = pathbuf;
  size_t pathlen = len;
  unsigned int i;
  int r;

  if (pathlen % 2 != 0 || pathlen > 6 || pathlen <= 0)
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_ARGUMENTS);

  /* if pathlen == 6 then the first FID must be MF (== 3F00) */
  if (pathlen == 6 && (path[0] != 0x3f || path[1] != 0x00))
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_ARGUMENTS);

  /* unify path (the first FID should be MF) */
  if (path[0] != 0x3f || path[1] != 0x00) {
    n_pathbuf[0] = 0x3f;
    n_pathbuf[1] = 0x00;
    memcpy(n_pathbuf + 2, path, pathlen);
    path = n_pathbuf;
    pathlen += 2;
  }

  for (i = 0; i < pathlen - 2; i += 2) {
    r = epass2003_select_fid(card, path[i], path[i + 1], NULL);
    LOG_TEST_RET(card->ctx, r, "SELECT FILE (DF-ID) failed");
  }

  return epass2003_select_fid(card, path[pathlen - 2], path[pathlen - 1], file_out);
}


static int
epass2003_select_file(struct sc_card *card, const sc_path_t * in_path,
    sc_file_t ** file_out)
{
  LOG_FUNC_CALLED(card->ctx);

  switch (in_path->type) {
  case SC_PATH_TYPE_FILE_ID:
    if (in_path->len != 2)
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_ARGUMENTS);
    return epass2003_select_fid(card, in_path->value[0], in_path->value[1], file_out);
  case SC_PATH_TYPE_DF_NAME:
    return epass2003_select_aid(card, in_path, file_out);
  case SC_PATH_TYPE_PATH:
    return epass2003_select_path(card, in_path->value, in_path->len, file_out);
  default:
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_ARGUMENTS);
  }
}

static int
epass2003_set_security_env(struct sc_card *card, const sc_security_env_t * env, int se_num)
{
  struct sc_apdu apdu;
  u8 sbuf[SC_MAX_APDU_BUFFER_SIZE] = {0};
  u8 *p;
  unsigned short fid = 0;
  int r, locked = 0;
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0x22, 0x41, 0);

  p = sbuf;
  *p++ = 0x80;    /* algorithm reference */
  *p++ = 0x01;
  *p++ = 0x84;

  *p++ = 0x81;
  *p++ = 0x02;

  fid = 0x2900;
  fid += (unsigned short)(0x20 * (env->key_ref[0] & 0xff));
  *p++ = fid >> 8;
  *p++ = fid & 0xff;
  r = (int)(p - sbuf);
  apdu.lc = r;
  apdu.datalen = r;
  apdu.data = sbuf;

  if (env->algorithm == SC_ALGORITHM_EC) {
    apdu.p2 = 0xB6;
    exdata->currAlg = SC_ALGORITHM_EC;
    if (env->algorithm_flags & SC_ALGORITHM_ECDSA_HASH_SHA1) {
      sbuf[2] = 0x91;
      exdata->ecAlgFlags = SC_ALGORITHM_ECDSA_HASH_SHA1;
    } else if (env->algorithm_flags & SC_ALGORITHM_ECDSA_HASH_SHA256) {
      sbuf[2] = 0x92;
      exdata->ecAlgFlags = SC_ALGORITHM_ECDSA_HASH_SHA256;
    } else {
      sbuf[2] = 0x92;
      exdata->ecAlgFlags = SC_ALGORITHM_ECDSA_HASH_NONE;
    }
  } else if (env->algorithm == SC_ALGORITHM_RSA) {
    exdata->currAlg = SC_ALGORITHM_RSA;
    apdu.p2 = 0xB8;
    sc_log(card->ctx, "setenv RSA Algorithm alg_flags = %0lx\n", env->algorithm_flags);
  } else {
    sc_log(card->ctx, "%0lx Alg Not Supported!", env->algorithm);
  }

  if (se_num > 0) {
    r = sc_lock(card);
    LOG_TEST_RET(card->ctx, r, "sc_lock() failed");
    locked = 1;
  }
  if (apdu.datalen != 0) {
    r = sc_transmit_apdu_t(card, &apdu);
    if (r) {
      sc_log(card->ctx, "%s: APDU transmit failed", sc_strerror(r));
      goto err;
    }

    r = sc_check_sw(card, apdu.sw1, apdu.sw2);
    if (r) {
      sc_log(card->ctx, "%s: Card returned error", sc_strerror(r));
      goto err;
    }
  }
  if (se_num <= 0)
    return 0;

  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0x22, 0xF2, se_num);
  r = sc_transmit_apdu_t(card, &apdu);
  sc_unlock(card);

  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  return sc_check_sw(card, apdu.sw1, apdu.sw2);

err:
  if (locked)
    sc_unlock(card);
  return r;
}


static int
epass2003_restore_security_env(struct sc_card *card, int se_num)
{
  LOG_FUNC_CALLED(card->ctx);
  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int epass2003_decipher(struct sc_card *card, const u8 * data, size_t datalen,
    u8 * out, size_t outlen)
{
  int r;
  struct sc_apdu apdu;
  u8 rbuf[SC_MAX_APDU_BUFFER_SIZE] = {0};
  u8 sbuf[SC_MAX_APDU_BUFFER_SIZE] = {0};
  epass2003_exdata *exdata = NULL;

  LOG_FUNC_CALLED(card->ctx);

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;

  if (exdata->currAlg == SC_ALGORITHM_EC) {
    if (exdata->ecAlgFlags & SC_ALGORITHM_ECDSA_HASH_SHA1) {
      r = hash_data(card, data, datalen, sbuf, SC_ALGORITHM_ECDSA_HASH_SHA1);
      LOG_TEST_RET(card->ctx, r, "hash_data failed");
      sc_format_apdu(card, &apdu, SC_APDU_CASE_3, 0x2A, 0x9E, 0x9A);
      apdu.data = sbuf;
      apdu.lc = 0x14;
      apdu.datalen = 0x14;
    } else if (exdata->ecAlgFlags & SC_ALGORITHM_ECDSA_HASH_SHA256) {
      r = hash_data(card, data, datalen, sbuf, SC_ALGORITHM_ECDSA_HASH_SHA256);
      LOG_TEST_RET(card->ctx, r, "hash_data failed");
      sc_format_apdu(card, &apdu, SC_APDU_CASE_3, 0x2A, 0x9E, 0x9A);
      apdu.data = sbuf;
      apdu.lc = 0x20;
      apdu.datalen = 0x20;
    } else if (exdata->ecAlgFlags & SC_ALGORITHM_ECDSA_HASH_NONE) {
      sc_format_apdu(card, &apdu, SC_APDU_CASE_3,0x2A, 0x9E, 0x9A);
      apdu.data = data;
      apdu.lc = datalen;
      apdu.datalen = datalen;
    } else {
      return SC_ERROR_NOT_SUPPORTED;
    }
    apdu.resp = rbuf;
    apdu.resplen = sizeof(rbuf);
    apdu.le = 0;

    r = sc_transmit_apdu_t(card, &apdu);
    LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
    if (apdu.sw1 == 0x90 && apdu.sw2 == 0x00) {
      size_t len = apdu.resplen > outlen ? outlen : apdu.resplen;
      memcpy(out, apdu.resp, len);
      LOG_FUNC_RETURN(card->ctx, (int)len);
    }
    LOG_FUNC_RETURN(card->ctx, sc_check_sw(card, apdu.sw1, apdu.sw2));
  } else if (exdata->currAlg == SC_ALGORITHM_RSA) {
    sc_format_apdu(card, &apdu, SC_APDU_CASE_4_EXT, 0x2A, 0x80, 0x86);
    apdu.resp = rbuf;
    apdu.resplen = sizeof(rbuf);
    apdu.le = 0;

    memcpy(sbuf, data, datalen);
    apdu.data = sbuf;
    apdu.lc = datalen;
    apdu.datalen = datalen;
  } else {
    sc_format_apdu(card, &apdu, SC_APDU_CASE_4_EXT, 0x2A, 0x80, 0x86);
    apdu.resp = rbuf;
    apdu.resplen = sizeof(rbuf);
    apdu.le = 256;

    memcpy(sbuf, data, datalen);
    apdu.data = sbuf;
    apdu.lc = datalen;
    apdu.datalen = datalen;
  }

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");

  if (apdu.sw1 == 0x90 && apdu.sw2 == 0x00) {
    size_t len = apdu.resplen > outlen ? outlen : apdu.resplen;
    memcpy(out, apdu.resp, len);
    LOG_FUNC_RETURN(card->ctx, (int)len);
  }

  LOG_FUNC_RETURN(card->ctx, sc_check_sw(card, apdu.sw1, apdu.sw2));
}


static int
acl_to_ac_byte(struct sc_card *card, const struct sc_acl_entry *e)
{
  if (e == NULL)
    return SC_ERROR_OBJECT_NOT_FOUND;

  switch (e->method) {
  case SC_AC_NONE:
    LOG_FUNC_RETURN(card->ctx, EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_EVERYONE);
  case SC_AC_NEVER:
    LOG_FUNC_RETURN(card->ctx, EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_NOONE);
  default:
    LOG_FUNC_RETURN(card->ctx, EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_USER);
  }

  LOG_FUNC_RETURN(card->ctx, SC_ERROR_INCORRECT_PARAMETERS);
}

/* Use epass2003 sec_attr to add acl entries */
int
sec_attr_to_entry(struct sc_card *card, sc_file_t *file, int index)
{
  int i;
  int found = 0;

  unsigned int method;
  unsigned long  keyref;

  SC_FUNC_CALLED(card->ctx, SC_LOG_DEBUG_VERBOSE);

  switch (file->sec_attr[index]) {
  case (EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_EVERYONE):
    method = SC_AC_NONE;
    keyref = SC_AC_KEY_REF_NONE;
    break;
  case (EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_USER):
    method = SC_AC_CHV;
    keyref = 1;
    break;
  default:
    sc_log(card->ctx, "Unknown value 0x%2.2x in file->sec_attr[%d]", file->sec_attr[index], index);
    method = SC_AC_NEVER;
    keyref = SC_AC_KEY_REF_NONE;
    break;
  }

  for (i = 0; i < (int)(sizeof(sec_attr_to_acl_entry) / sizeof(sec_attr_to_acl_entries_t)); i++) {
    const sec_attr_to_acl_entries_t *e = &sec_attr_to_acl_entry[i];

    if (index == e->index && file->type == e->file_type
        && file->ef_structure == e->file_ef_structure) {
        /* may add multiple entries */
      sc_file_add_acl_entry(file, e->op, method, keyref);
      found++;
    }
  }
  if (found != 1) {
    sc_log(card->ctx,"found %d entries ", found);
  }

  return 0;
}

static int
epass2003_process_fci(struct sc_card *card, sc_file_t * file, const u8 * buf, size_t buflen)
{
  sc_context_t *ctx = card->ctx;
  size_t taglen, len = buflen;
  const u8 *tag = NULL, *p = buf;

  sc_log(ctx, "processing FCI bytes");
  tag = sc_asn1_find_tag(ctx, p, len, 0x83, &taglen);
  if (tag != NULL && taglen == 2) {
    file->id = (tag[0] << 8) | tag[1];
    sc_log(ctx, "  file identifier: 0x%02X%02X", tag[0], tag[1]);
  }

  tag = sc_asn1_find_tag(ctx, p, len, 0x80, &taglen);
  if (tag != NULL && taglen > 0 && taglen < 3) {
    file->size = tag[0];
    if (taglen == 2)
      file->size = (file->size << 8) + tag[1];
    sc_log(ctx, "  bytes in file: %"SC_FORMAT_LEN_SIZE_T"u",
         file->size);
  }

  if (tag == NULL) {
    tag = sc_asn1_find_tag(ctx, p, len, 0x81, &taglen);
    if (tag != NULL && taglen >= 2) {
      int bytes = (tag[0] << 8) + tag[1];

      sc_log(ctx, "  bytes in file: %d", bytes);
      file->size = bytes;
    }
  }

  tag = sc_asn1_find_tag(ctx, p, len, 0x82, &taglen);
  if (tag != NULL) {
    if (taglen > 0) {
      unsigned char byte = tag[0];
      const char *type;

      if (byte == 0x38) {
        type = "DF";
        file->type = SC_FILE_TYPE_DF;
      } else if (0x01 <= byte && byte <= 0x07) {
        type = "working EF";
        file->type = SC_FILE_TYPE_WORKING_EF;
        switch (byte) {
        case 0x01:
          file->ef_structure = SC_FILE_EF_TRANSPARENT;
          break;
        case 0x02:
          file->ef_structure = SC_FILE_EF_LINEAR_FIXED;
          break;
        case 0x04:
          file->ef_structure = SC_FILE_EF_LINEAR_FIXED;
          break;
        default:
          break;
        }

      } else if (0x10 == byte) {
        type = "BSO";
        file->type = SC_FILE_TYPE_BSO;
      } else if (0x11 <= byte) {
        type = "internal EF";
        file->type = SC_FILE_TYPE_INTERNAL_EF;
        switch (byte) {
        case 0x11:
          break;
        case 0x12:
          break;
        default:
          break;
        }
      } else {
        type = "unknown";
        file->type = SC_FILE_TYPE_INTERNAL_EF;
      }
      sc_log(ctx, "type %s, EF structure %d", type, byte);
    }
  }

  tag = sc_asn1_find_tag(ctx, p, len, 0x84, &taglen);
  if (tag != NULL && taglen > 0 && taglen <= 16) {
    memcpy(file->name, tag, taglen);
    file->namelen = taglen;

    sc_log_hex(ctx, "File name", file->name, file->namelen);
    if (!file->type)
      file->type = SC_FILE_TYPE_DF;
  }

  tag = sc_asn1_find_tag(ctx, p, len, 0x85, &taglen);
  if (tag != NULL && taglen)
    sc_file_set_prop_attr(file, tag, taglen);
  else
    file->prop_attr_len = 0;

  tag = sc_asn1_find_tag(ctx, p, len, 0xA5, &taglen);
  if (tag != NULL && taglen)
    sc_file_set_prop_attr(file, tag, taglen);

  tag = sc_asn1_find_tag(ctx, p, len, 0x86, &taglen);
  if (tag != NULL && taglen) {
    unsigned int i;
    sc_file_set_sec_attr(file, tag, taglen);
    for (i = 0; i< taglen; i++)
      if (tag[i] != 0xff) /* skip unused entries */
        sec_attr_to_entry(card, file, i);
  }

  tag = sc_asn1_find_tag(ctx, p, len, 0x8A, &taglen);
  if (tag != NULL && taglen == 1) {
    if (tag[0] == 0x01)
      file->status = SC_FILE_STATUS_CREATION;
    else if (tag[0] == 0x07 || tag[0] == 0x05)
      file->status = SC_FILE_STATUS_ACTIVATED;
    else if (tag[0] == 0x06 || tag[0] == 0x04)
      file->status = SC_FILE_STATUS_INVALIDATED;
  }
  file->magic = SC_FILE_MAGIC;

  return 0;
}


static int
epass2003_construct_fci(struct sc_card *card, const sc_file_t * file,
    u8 * out, size_t * outlen)
{
  u8 *p = out;
  u8 buf[64];
  unsigned char ops[8] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
  int rv;
  unsigned ii;

  if (*outlen < 2)
    return SC_ERROR_BUFFER_TOO_SMALL;

  *p++ = 0x62;
  p++;
  if (file->type == SC_FILE_TYPE_WORKING_EF) {
    if (file->ef_structure == SC_FILE_EF_TRANSPARENT) {
      buf[0] = (file->size >> 8) & 0xFF;
      buf[1] = file->size & 0xFF;
      sc_asn1_put_tag(0x80, buf, 2, p, *outlen - (p - out), &p);
    }
  }
  if (file->type == SC_FILE_TYPE_DF) {
    buf[0] = 0x38;
    buf[1] = 0x00;
    sc_asn1_put_tag(0x82, buf, 2, p, *outlen - (p - out), &p);
  }
  else if (file->type == SC_FILE_TYPE_WORKING_EF) {
    buf[0] = file->ef_structure & 7;
    if (file->ef_structure == SC_FILE_EF_TRANSPARENT) {
      buf[1] = 0x00;
      sc_asn1_put_tag(0x82, buf, 2, p, *outlen - (p - out), &p);
    } else if (file->ef_structure == SC_FILE_EF_LINEAR_FIXED ||
        file->ef_structure == SC_FILE_EF_LINEAR_VARIABLE) {
      buf[1] = 0x00;
      buf[2] = 0x00;
      buf[3] = 0x40;  /* record length */
      buf[4] = 0x00;  /* record count */
      sc_asn1_put_tag(0x82, buf, 5, p, *outlen - (p - out), &p);
    } else {
      return SC_ERROR_NOT_SUPPORTED;
    }

  }
  else if (file->type == SC_FILE_TYPE_INTERNAL_EF) {
    if (file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_CRT ||
        file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_CRT) {
      buf[0] = 0x11;
      buf[1] = 0x00;
    } else if (file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC ||
        file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC) {
      buf[0] = 0x12;
      buf[1] = 0x00;
    } else {
      return SC_ERROR_NOT_SUPPORTED;
    }
    sc_asn1_put_tag(0x82, buf, 2, p, *outlen - (p - out), &p);
  } else if (file->type == SC_FILE_TYPE_BSO) {
    buf[0] = 0x10;
    buf[1] = 0x00;
    sc_asn1_put_tag(0x82, buf, 2, p, *outlen - (p - out), &p);
  }

  buf[0] = (file->id >> 8) & 0xFF;
  buf[1] = file->id & 0xFF;
  sc_asn1_put_tag(0x83, buf, 2, p, *outlen - (p - out), &p);
  if (file->type == SC_FILE_TYPE_DF) {
    if (file->namelen != 0) {
      sc_asn1_put_tag(0x84, file->name, file->namelen, p, *outlen - (p - out), &p);
    } else {
      return SC_ERROR_INVALID_ARGUMENTS;
    }
  }
  if (file->type == SC_FILE_TYPE_DF) {
    unsigned char data[2] = {0x00, 0x7F};
    /* 127 files at most */
    sc_asn1_put_tag(0x85, data, sizeof(data), p, *outlen - (p - out), &p);
  } else if (file->type == SC_FILE_TYPE_BSO) {
    buf[0] = file->size & 0xff;
    sc_asn1_put_tag(0x85, buf, 1, p, *outlen - (p - out), &p);
  } else if (file->type == SC_FILE_TYPE_INTERNAL_EF) {
    if (file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_CRT ||
        file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC ||
        file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_CRT ||
        file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC) {
      buf[0] = (file->size >> 8) & 0xFF;
      buf[1] = file->size & 0xFF;
      sc_asn1_put_tag(0x85, buf, 2, p, *outlen - (p - out), &p);
    }
  }
  if (file->sec_attr_len) {
    memcpy(buf, file->sec_attr, file->sec_attr_len);
    sc_asn1_put_tag(0x86, buf, file->sec_attr_len, p, *outlen - (p - out), &p);

  } else {
    sc_log(card->ctx, "SC_FILE_ACL");
    if (file->type == SC_FILE_TYPE_DF) {
      ops[0] = SC_AC_OP_LIST_FILES;
      ops[1] = SC_AC_OP_CREATE;
      ops[3] = SC_AC_OP_DELETE;
    } else if (file->type == SC_FILE_TYPE_WORKING_EF) {
      if (file->ef_structure == SC_FILE_EF_TRANSPARENT) {
        ops[0] = SC_AC_OP_READ;
        ops[1] = SC_AC_OP_UPDATE;
        ops[3] = SC_AC_OP_DELETE;
      } else if (file->ef_structure == SC_FILE_EF_LINEAR_FIXED ||
          file->ef_structure == SC_FILE_EF_LINEAR_VARIABLE) {
        ops[0] = SC_AC_OP_READ;
        ops[1] = SC_AC_OP_UPDATE;
        ops[2] = SC_AC_OP_WRITE;
        ops[3] = SC_AC_OP_DELETE;
      } else {
        return SC_ERROR_NOT_SUPPORTED;
      }
    } else if (file->type == SC_FILE_TYPE_BSO) {
      ops[0] = SC_AC_OP_UPDATE;
      ops[3] = SC_AC_OP_DELETE;
    } else if (file->type == SC_FILE_TYPE_INTERNAL_EF) {
      if (file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_CRT ||
          file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_CRT) {
        ops[1] = SC_AC_OP_UPDATE;
        ops[2] = SC_AC_OP_CRYPTO;
        ops[3] = SC_AC_OP_DELETE;
      } else if (file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC ||
          file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC) {
        ops[0] = SC_AC_OP_READ;
        ops[1] = SC_AC_OP_UPDATE;
        ops[2] = SC_AC_OP_CRYPTO;
        ops[3] = SC_AC_OP_DELETE;
      }
    } else {
      return SC_ERROR_NOT_SUPPORTED;
    }

    for (ii = 0; ii < sizeof(ops); ii++) {
      const struct sc_acl_entry *entry;

      buf[ii] = 0xFF;
      if (ops[ii] == 0xFF)
        continue;
      entry = sc_file_get_acl_entry(file, ops[ii]);

      rv = acl_to_ac_byte(card, entry);
      LOG_TEST_RET(card->ctx, rv, "Invalid ACL");

      buf[ii] = rv;
    }
    sc_asn1_put_tag(0x86, buf, sizeof(ops), p, *outlen - (p - out), &p);
    if (file->size == 256) {
      out[4]= 0x13;
    }
  }

  /* VT ??? */
  if (file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_RSA_PUBLIC ||
      file->ef_structure == SC_CARDCTL_OBERTHUR_KEY_EC_PUBLIC) {
    unsigned char data[2] = {0x00, 0x66};
    sc_asn1_put_tag(0x87, data, sizeof(data), p, *outlen - (p - out), &p);
    if (file->size == 256) {
      out[4] = 0x14;
    }
  }

  out[1] = p - out - 2;

  *outlen = p - out;
  return 0;
}


static int
epass2003_create_file(struct sc_card *card, sc_file_t * file)
{
  int r;
  size_t len;
  u8 sbuf[SC_MAX_APDU_BUFFER_SIZE] = {0};
  struct sc_apdu apdu;

  len = SC_MAX_APDU_BUFFER_SIZE;

  epass2003_hook_file(file, 1);

  if (card->ops->construct_fci == NULL)
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_NOT_SUPPORTED);

  r = epass2003_construct_fci(card, file, sbuf, &len);
  LOG_TEST_RET(card->ctx, r, "construct_fci() failed");

  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0xE0, 0x00, 0x00);
  apdu.lc = len;
  apdu.datalen = len;
  apdu.data = sbuf;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "APDU sw1/2 wrong");

  epass2003_hook_file(file, 0);
  return r;
}


static int
epass2003_delete_file(struct sc_card *card, const sc_path_t * path)
{
  int r;
  u8 sbuf[2];
  struct sc_apdu apdu;

  LOG_FUNC_CALLED(card->ctx);

  r = sc_select_file(card, path, NULL);
  LOG_TEST_RET(card->ctx, r, "Can not select file");
  r = epass2003_hook_path((struct sc_path *)path, 1);
  LOG_TEST_RET(card->ctx, r, "Can not hook path");

  sbuf[0] = path->value[path->len - 2];
  sbuf[1] = path->value[path->len - 1];
  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0xE4, 0x00, 0x00);
  apdu.lc = 2;
  apdu.datalen = 2;
  apdu.data = sbuf;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "Delete file failed");

  LOG_FUNC_RETURN(card->ctx, r);
}

static int
epass2003_list_files(struct sc_card *card, unsigned char *buf, size_t buflen)
{
  struct sc_apdu apdu;
  unsigned char rbuf[SC_MAX_APDU_BUFFER_SIZE] = {0};
  int r;

  SC_FUNC_CALLED(card->ctx, SC_LOG_DEBUG_VERBOSE);
  sc_format_apdu(card, &apdu, SC_APDU_CASE_1, 0x34, 0x00, 0x00);
  apdu.cla = 0x80;
  apdu.le = 0;
  apdu.resplen = sizeof(rbuf);
  apdu.resp = rbuf;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");

  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "Card returned error");

  if (apdu.resplen == 0x100 && rbuf[0] == 0 && rbuf[1] == 0)
    LOG_FUNC_RETURN(card->ctx, 0);

  buflen = buflen < apdu.resplen ? buflen : apdu.resplen;
  memcpy(buf, rbuf, buflen);

  LOG_FUNC_RETURN(card->ctx, (int)buflen);
}


static int
internal_write_rsa_key_factor(struct sc_card *card, unsigned short fid, u8 factor,
    sc_pkcs15_bignum_t data)
{
  int r;
  struct sc_apdu apdu;
  u8 sbuff[SC_MAX_EXT_APDU_BUFFER_SIZE] = {0};

  LOG_FUNC_CALLED(card->ctx);

  sbuff[0] = ((fid & 0xff00) >> 8);
  sbuff[1] = (fid & 0x00ff);
  memcpy(&sbuff[2], data.data, data.len);
//  sc_mem_reverse(&sbuff[2], data.len);

  sc_format_apdu(card, &apdu, SC_APDU_CASE_3, 0xe7, factor, 0x00);
  apdu.cla = 0x80;
  apdu.lc = apdu.datalen = 2 + data.len;
  apdu.data = sbuff;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "Write rsa key factor failed");

  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
internal_write_rsa_key(struct sc_card *card, unsigned short fid, struct sc_pkcs15_prkey_rsa *rsa)
{
  int r;

  LOG_FUNC_CALLED(card->ctx);

  r = internal_write_rsa_key_factor(card, fid, 0x02, rsa->modulus);
  LOG_TEST_RET(card->ctx, r, "write n failed");
  r = internal_write_rsa_key_factor(card, fid, 0x03, rsa->d);
  LOG_TEST_RET(card->ctx, r, "write d failed");

  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
hash_data(struct sc_card *card, const unsigned char *data, size_t datalen, unsigned char *hash, unsigned int mechanismType)
{

  if ((NULL == data) || (NULL == hash))
    return SC_ERROR_INVALID_ARGUMENTS;

  if (mechanismType & SC_ALGORITHM_ECDSA_HASH_SHA1) {
    unsigned char data_hash[24] = {0};
    size_t len = 0;

    sha1_digest(card, data, datalen, data_hash);
    len = REVERSE_ORDER4(datalen);
    memcpy(&data_hash[20], &len, 4);
    memcpy(hash, data_hash, 24);
  } else if (mechanismType & SC_ALGORITHM_ECDSA_HASH_SHA256) {
    unsigned char data_hash[36] = {0};
    size_t len = 0;

    sha256_digest(card, data, datalen, data_hash);
    len = REVERSE_ORDER4(datalen);
    memcpy(&data_hash[32], &len, 4);
    memcpy(hash, data_hash, 36);
  } else {
    return SC_ERROR_NOT_SUPPORTED;
  }

  return SC_SUCCESS;
}


static int
install_secret_key(struct sc_card *card, unsigned char ktype, unsigned char kid,
    unsigned char useac, unsigned char modifyac, unsigned char EC,
    unsigned char *data, unsigned long dataLen)
{
  int r;
  struct sc_apdu apdu;
  unsigned char isapp = 0x00; /* appendable */
  unsigned char tmp_data[256] = {0};

  tmp_data[0] = ktype;
  tmp_data[1] = kid;
  tmp_data[2] = useac;
  tmp_data[3] = modifyac;
  tmp_data[8] = 0xFF;

  if (0x04 == ktype || 0x06 == ktype) {
    tmp_data[4] = EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_SO;
    tmp_data[5] = EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_SO;
    tmp_data[7] = (kid == PIN_ID[0] ? EPASS2003_AC_USER : EPASS2003_AC_SO);
    tmp_data[9] = (EC << 4) | EC;
  }

  memcpy(&tmp_data[10], data, dataLen);
  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0xe3, isapp, 0x00);
  apdu.cla = 0x80;
  apdu.lc = apdu.datalen = 10 + dataLen;
  apdu.data = tmp_data;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU install_secret_key failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "install_secret_key failed");

  return r;
}


static int
internal_install_pre(struct sc_card *card)
{
  int r;
  /* init key for enc */
  r = install_secret_key(card, 0x01, 0x00,
             EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_EVERYONE,
             EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_EVERYONE,
             0, g_init_key_enc, 16);
  LOG_TEST_RET(card->ctx, r, "Install init key failed");

  /* init key for mac */
  r = install_secret_key(card, 0x02, 0x00,
             EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_EVERYONE,
             EPASS2003_AC_MAC_NOLESS | EPASS2003_AC_EVERYONE,
             0, g_init_key_mac, 16);
  LOG_TEST_RET(card->ctx, r, "Install init key failed");

  return r;
}


/* use external auth secret as pin */
static int
internal_install_pin(struct sc_card *card, sc_epass2003_wkey_data * pin)
{
  int r;
  unsigned char hash[HASH_LEN] = {0};

  r = hash_data(card, pin->key_data.es_secret.key_val, pin->key_data.es_secret.key_len, hash, SC_ALGORITHM_ECDSA_HASH_SHA1);
  LOG_TEST_RET(card->ctx, r, "hash data failed");

  r = install_secret_key(card, 0x04, pin->key_data.es_secret.kid,
             pin->key_data.es_secret.ac[0],
             pin->key_data.es_secret.ac[1],
             pin->key_data.es_secret.EC, hash, HASH_LEN);
  LOG_TEST_RET(card->ctx, r, "Install failed");

  return r;
}


static int
epass2003_write_key(struct sc_card *card, sc_epass2003_wkey_data * data)
{
  LOG_FUNC_CALLED(card->ctx);

  if (data->type & SC_EPASS2003_KEY) {
    if (data->type == SC_EPASS2003_KEY_RSA)
      return internal_write_rsa_key(card, data->key_data.es_key.fid,
                  data->key_data.es_key.rsa);
    else
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_NOT_SUPPORTED);
  } else if (data->type & SC_EPASS2003_SECRET) {
    if (data->type == SC_EPASS2003_SECRET_PRE)
      return internal_install_pre(card);
    else if (data->type == SC_EPASS2003_SECRET_PIN)
      return internal_install_pin(card, data);
    else
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_NOT_SUPPORTED);
  } else {
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_NOT_SUPPORTED);
  }

  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
epass2003_gen_key(struct sc_card *card, sc_epass2003_gen_key_data * data)
{
  int r;
  size_t len = data->key_length;
  struct sc_apdu apdu;
  u8 rbuf[SC_MAX_EXT_APDU_BUFFER_SIZE] = {0};
  u8 sbuf[SC_MAX_EXT_APDU_BUFFER_SIZE] = {0};

  LOG_FUNC_CALLED(card->ctx);

  if (len == 256) {
    sbuf[0] = 0x02;
  } else {
    sbuf[0] = 0x01;
  }
  sbuf[1] = (u8) ((len >> 8) & 0xff);
  sbuf[2] = (u8) (len & 0xff);
  sbuf[3] = (u8) ((data->prkey_id >> 8) & 0xFF);
  sbuf[4] = (u8) ((data->prkey_id) & 0xFF);
  sbuf[5] = (u8) ((data->pukey_id >> 8) & 0xFF);
  sbuf[6] = (u8) ((data->pukey_id) & 0xFF);

  /* generate key */
  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0x46, 0x00, 0x00);
  apdu.lc = apdu.datalen = 7;
  apdu.data = sbuf;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "generate key pair failed");

  /* read public key */
  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0xb4, 0x02, 0x00);
  if (len == 256) {
    apdu.p1 = 0x00;
  }

  apdu.cla = 0x80;
  apdu.lc = apdu.datalen = 2;
  apdu.data = &sbuf[5];
  apdu.resp = rbuf;
  apdu.resplen = sizeof(rbuf);
  apdu.le = 0x00;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU transmit failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "get pukey failed");

  if (len < apdu.resplen)
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_ARGUMENTS);

  if (256 == len) { /* ECC 256 bit */
    size_t xCoordinateLen = rbuf[1];
    size_t yCoordinateLen;
    unsigned char *tmp;

    if (2 + xCoordinateLen + 1 > apdu.resplen) {
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA);
    }
    yCoordinateLen = rbuf[2 + xCoordinateLen + 1];
    if (2 + xCoordinateLen + 2 + yCoordinateLen > apdu.resplen) {
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA);
    }
    data->modulus_len = xCoordinateLen + yCoordinateLen;
    tmp = (u8 *)malloc(data->modulus_len);
    if (!tmp) {
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_OUT_OF_MEMORY);
    }

    if (0x58 == rbuf[0]) {
      memcpy(tmp, &rbuf[2], xCoordinateLen);
    } else {
      free(tmp);
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_OBJECT_NOT_VALID);
    }
    if (0x59 == rbuf[2 + xCoordinateLen]) {
      memcpy(tmp + xCoordinateLen, &rbuf[2+xCoordinateLen+2], yCoordinateLen);
    } else {
      free(tmp);
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_OBJECT_NOT_VALID);
    }

    data->modulus = tmp;
  } else {
    data->modulus = (u8 *) malloc(len);
    if (!data->modulus) {
      LOG_FUNC_RETURN(card->ctx, SC_ERROR_OUT_OF_MEMORY);
    } else {
      memcpy(data->modulus, rbuf, len);
    }
  }
  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
epass2003_erase_card(struct sc_card *card)
{
  static const unsigned char install_magic_pin[26] = {
    /* compare install_secret_key */
      0x06, 0x01, 0x10, 0x16, 0x16, 0x16, 0x00, 0x0f, 0xff, 0x66,
      0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
      0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  };
  static const unsigned char magic_pin[16] = {
      0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
      0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
  };
  static const unsigned char mf_path[2] = { 0x3f, 0x00 };
  sc_apdu_t apdu;
  int r;

  LOG_FUNC_CALLED(card->ctx);

  /* install magic pin */
  sc_format_apdu(card, &apdu, 0x03, 0xe3, 0x00, 0x00);
  apdu.cla = 0x80;
  apdu.data = install_magic_pin;
  apdu.datalen = apdu.lc = sizeof(install_magic_pin);
  r = sc_transmit_apdu(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU install magic pin failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "install magic pin failed");

  /* verify magic pin */
  sc_format_apdu(card, &apdu, 0x03, 0x20, 0x00, 0x01);
  apdu.cla = 0;
  apdu.data = magic_pin;
  apdu.datalen = apdu.lc = sizeof(magic_pin);
  r = sc_transmit_apdu(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU verify magic pin failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "verify magic pin failed");

  /* delete MF */
  sc_format_apdu(card, &apdu, 0x03, 0xe4, 0x00, 0x00);
  apdu.cla = 0;
  apdu.data = mf_path;
  apdu.datalen = apdu.lc = sizeof(mf_path);
  r = sc_transmit_apdu(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU delete MF failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "delete MF failed");

  LOG_FUNC_RETURN(card->ctx, r);
}


static int
epass2003_get_serialnr(struct sc_card *card, sc_serial_number_t * serial)
{
  u8 rbuf[8];
  size_t rbuf_len = sizeof(rbuf);

  LOG_FUNC_CALLED(card->ctx);

  if (SC_SUCCESS != get_data(card, 0x80, rbuf, rbuf_len))
    return SC_ERROR_CARD_CMD_FAILED;

  card->serialnr.len = serial->len = 8;
  memcpy(card->serialnr.value, rbuf, 8);
  memcpy(serial->value, rbuf, 8);

  LOG_FUNC_RETURN(card->ctx, SC_SUCCESS);
}


static int
epass2003_card_ctl(struct sc_card *card, unsigned long cmd, void *ptr)
{
  LOG_FUNC_CALLED(card->ctx);

  sc_log(card->ctx, "cmd is %0lx", cmd);
  switch (cmd) {
  case SC_CARDCTL_ENTERSAFE_WRITE_KEY:
    return epass2003_write_key(card, (sc_epass2003_wkey_data *) ptr);
  case SC_CARDCTL_ENTERSAFE_GENERATE_KEY:
    return epass2003_gen_key(card, (sc_epass2003_gen_key_data *) ptr);
  case SC_CARDCTL_ERASE_CARD:
    return epass2003_erase_card(card);
  case SC_CARDCTL_GET_SERIALNR:
    return epass2003_get_serialnr(card, (sc_serial_number_t *) ptr);
  default:
    return SC_ERROR_NOT_SUPPORTED;
  }
}


static void
internal_sanitize_pin_info(struct sc_pin_cmd_pin *pin, unsigned int num)
{
  pin->encoding = SC_PIN_ENCODING_ASCII;
  pin->min_length = 4;
  pin->max_length = 16;
  pin->pad_length = 16;
  pin->offset = 5 + num * 16;
  pin->pad_char = 0x00;
}


static int
get_external_key_maxtries(struct sc_card *card, unsigned char *maxtries)
{
  unsigned char maxcounter[2] = {0};
  static const sc_path_t file_path = {
    {0x3f, 0x00, 0x50, 0x15, 0x9f, 0x00, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 6,
    0,
    0,
    SC_PATH_TYPE_PATH,
    {{0}, 0}
  };
  int ret;

  ret = sc_select_file(card, &file_path, NULL);
  LOG_TEST_RET(card->ctx, ret, "select max counter file failed");

  ret = sc_read_binary(card, 0, maxcounter, 2, 0);
  LOG_TEST_RET(card->ctx, ret, "read max counter file failed");

  *maxtries = maxcounter[0];
  return SC_SUCCESS;
}


static int
get_external_key_retries(struct sc_card *card, unsigned char kid, unsigned char *retries)
{
  int r;
  struct sc_apdu apdu;
  unsigned char random[16] = {0};

  r = sc_get_challenge(card, random, 8);
  LOG_TEST_RET(card->ctx, r, "get challenge get_external_key_retries failed");

  sc_format_apdu(card, &apdu, SC_APDU_CASE_1, 0x82, 0x01, 0x80 | kid);
  apdu.resp = NULL;
  apdu.resplen = 0;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU get_external_key_retries failed");

  if (retries && ((0x63 == (apdu.sw1 & 0xff)) && (0xC0 == (apdu.sw2 & 0xf0)))) {
    *retries = (apdu.sw2 & 0x0f);
    r = SC_SUCCESS;
  } else {
    LOG_TEST_RET(card->ctx, r, "get_external_key_retries failed");
    r = SC_ERROR_CARD_CMD_FAILED;
  }

  return r;
}

static int
epass2003_get_challenge(sc_card_t *card, u8 *rnd, size_t len)
{
  u8 rbuf[16];
  size_t out_len;
  int r;

  LOG_FUNC_CALLED(card->ctx);

  r = iso_ops->get_challenge(card, rbuf, sizeof rbuf);
  LOG_TEST_RET(card->ctx, r, "GET CHALLENGE cmd failed");

  if (len < (size_t) r) {
    out_len = len;
  } else {
    out_len = (size_t) r;
  }
  memcpy(rnd, rbuf, out_len);

  LOG_FUNC_RETURN(card->ctx, (int) out_len);
}


static int
external_key_auth(struct sc_card *card, unsigned char kid,
    unsigned char *data, size_t datalen)
{
  int r;
  struct sc_apdu apdu;
  unsigned char random[16] = {0};
  unsigned char tmp_data[16] = {0};
  unsigned char hash[HASH_LEN] = {0};
  unsigned char iv[16] = {0};

  r = sc_get_challenge(card, random, 8);
  LOG_TEST_RET(card->ctx, r, "get challenge external_key_auth failed");

  r = hash_data(card, data, datalen, hash, SC_ALGORITHM_ECDSA_HASH_SHA1);
  LOG_TEST_RET(card->ctx, r, "hash data failed");

  r = des3_encrypt_cbc(card, hash, HASH_LEN, iv, random, 8, tmp_data);
  LOG_TEST_RET(card->ctx, r, "encryption failed");

  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0x82, 0x01, 0x80 | kid);
  apdu.lc = apdu.datalen = 8;
  apdu.data = tmp_data;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU external_key_auth failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "external_key_auth failed");

  return r;
}


static int
update_secret_key(struct sc_card *card, unsigned char ktype, unsigned char kid,
    const unsigned char *data, unsigned long datalen)
{
  int r;
  struct sc_apdu apdu;
  unsigned char hash[HASH_LEN] = {0};
  unsigned char tmp_data[256] = {0};
  unsigned char maxtries = 0;

  r = hash_data(card, data, datalen, hash, SC_ALGORITHM_ECDSA_HASH_SHA1);
  LOG_TEST_RET(card->ctx, r, "hash data failed");

  r = get_external_key_maxtries(card, &maxtries);
  LOG_TEST_RET(card->ctx, r, "get max counter failed");

  tmp_data[0] = (maxtries << 4) | maxtries;
  memcpy(&tmp_data[1], hash, HASH_LEN);
  sc_format_apdu(card, &apdu, SC_APDU_CASE_3_SHORT, 0xe5, ktype, kid);
  apdu.cla = 0x80;
  apdu.lc = apdu.datalen = 1 + HASH_LEN;
  apdu.data = tmp_data;

  r = sc_transmit_apdu_t(card, &apdu);
  LOG_TEST_RET(card->ctx, r, "APDU update_secret_key failed");
  r = sc_check_sw(card, apdu.sw1, apdu.sw2);
  LOG_TEST_RET(card->ctx, r, "update_secret_key failed");

  return r;
}

/* use external auth secret as pin */
static int
epass2003_pin_cmd(struct sc_card *card, struct sc_pin_cmd_data *data)
{
  int r;
  u8 kid;
  u8 retries = 0;
  u8 pin_low = 3;
  unsigned char maxtries = 0;

  LOG_FUNC_CALLED(card->ctx);

  internal_sanitize_pin_info(&data->pin1, 0);
  internal_sanitize_pin_info(&data->pin2, 1);
  data->flags |= SC_PIN_CMD_NEED_PADDING;
  kid = data->pin_reference;

  if (NULL == (unsigned char *)data->pin1.data || 0 == data->pin1.len)
    LOG_FUNC_RETURN(card->ctx, SC_ERROR_PIN_CODE_INCORRECT);

  /* get pin retries */
  if (data->cmd == SC_PIN_CMD_GET_INFO) {

    r = get_external_key_retries(card, 0x80 | kid, &retries);
    if (r == SC_SUCCESS) {
      data->pin1.tries_left = retries;

      r = get_external_key_maxtries(card, &maxtries);
      LOG_TEST_RET(card->ctx, r, "get max counter failed");

      data->pin1.max_tries = maxtries;
    }
    LOG_TEST_RET(card->ctx, r, "verify pin failed");
  } else if (data->cmd == SC_PIN_CMD_UNBLOCK) { /* verify */
    r = external_key_auth(card, (kid + 1), (unsigned char *)data->pin1.data,
        data->pin1.len);
    LOG_TEST_RET(card->ctx, r, "verify pin failed");
  } else if (data->cmd == SC_PIN_CMD_CHANGE || data->cmd == SC_PIN_CMD_UNBLOCK) { /* change */
    r = external_key_auth(card, kid, (unsigned char *)data->pin1.data,
        data->pin1.len);
    LOG_TEST_RET(card->ctx, r, "verify pin failed");

    r = update_secret_key(card, 0x04, kid, data->pin2.data,
        (unsigned long)data->pin2.len);
    LOG_TEST_RET(card->ctx, r, "change pin failed");
  } else {
    r = external_key_auth(card, kid, (unsigned char *)data->pin1.data,
        data->pin1.len);
    LOG_TEST_RET(card->ctx, r, "verify pin failed");

    r = get_external_key_retries(card, 0x80 | kid, &retries);
    if (retries < pin_low)
      sc_log(card->ctx, "Verification failed (remaining tries: %d)", retries);

    LOG_TEST_RET(card->ctx, r, "verify pin failed");
  }

  if (r == SC_SUCCESS) {
    data->pin1.logged_in = SC_PIN_STATE_LOGGED_IN;
  }
  return r;
}

static int
epass2003_logout(struct sc_card *card)
{
  epass2003_exdata *exdata = NULL;

  if (!card->drv_data)
    return SC_ERROR_INVALID_ARGUMENTS;

  exdata = (epass2003_exdata *)card->drv_data;
  if (exdata->sm) {
    sc_sm_stop(card);
    return epass2003_refresh(card);
  }

  return SC_ERROR_NOT_SUPPORTED;
}

static struct sc_card_driver *sc_get_driver(void)
{
  struct sc_card_driver *iso_drv = sc_get_iso7816_driver();

  if (iso_ops == NULL)
    iso_ops = iso_drv->ops;

  epass2003_ops = *iso_ops;

  epass2003_ops.match_card = epass2003_match_card;
  epass2003_ops.init = epass2003_init;
  epass2003_ops.finish = epass2003_finish;
  epass2003_ops.write_binary = NULL;
  epass2003_ops.write_record = NULL;
  epass2003_ops.select_file = epass2003_select_file;
  epass2003_ops.get_response = NULL;
  epass2003_ops.restore_security_env = epass2003_restore_security_env;
  epass2003_ops.set_security_env = epass2003_set_security_env;
  epass2003_ops.decipher = epass2003_decipher;
  epass2003_ops.compute_signature = epass2003_decipher;
  epass2003_ops.create_file = epass2003_create_file;
  epass2003_ops.delete_file = epass2003_delete_file;
  epass2003_ops.list_files = epass2003_list_files;
  epass2003_ops.card_ctl = epass2003_card_ctl;
  epass2003_ops.process_fci = epass2003_process_fci;
  epass2003_ops.construct_fci = epass2003_construct_fci;
  epass2003_ops.pin_cmd = epass2003_pin_cmd;
  epass2003_ops.check_sw = epass2003_check_sw;
  epass2003_ops.get_challenge = epass2003_get_challenge;
  epass2003_ops.logout = epass2003_logout;
  return &epass2003_drv;
}

struct sc_card_driver *sc_get_epass2003_driver(void)
{
  return sc_get_driver();
}
#endif  /* #ifdef ENABLE_OPENSSL */
#endif  /* #ifdef ENABLE_SM */

Coverage Report

Created: 2026-08-13 06:08