/usr/share/opensc/gpk.profile is in opensc 0.14.0-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 | #
# PKCS15 r/w profile for GPK cards
#
cardinfo {
max-pin-length = 8;
pin-encoding = BCD;
pin-pad-char = 0x00;
}
# Additional filesystem info.
# This is added to the file system info specified in the
# main profile.
filesystem {
DF MF {
ACL = CREATE=PRO1;
DF PKCS15-AppDF {
# The PIN file.
# The GPK supports just one PIN file per DF, and the file
# can hold up to 8 pins (or 4 PIN/PUK pairs).
#
# Note1: many commands use the short file ID (i.e. the lower
# 5 bits of the FID) so you must be careful when picking FIDs
# for the public key and PIN files.
EF pinfile {
file-id = 0000;
structure = 0x21; # GPK specific
record-length = 8;
size = 64; # room for 8 pins
ACL = *=NEVER;
}
# This template defines files for keys, certificates etc.
#
# When instantiating the template, each file id will be
# combined with the last octet of the object's pkcs15 id
# to form a unique file ID.
template key-domain {
# Private key files.
# GPK private key files will never let you read the private key
# part, so it's okay to set READ=NONE. What's more, we may need
# read access so we're able to check the key size/type.
EF private-key {
file-id = 3010; # This is the base FileID
structure = 0x2C; # GPK specific
ACL = *=NEVER,
READ=NONE,
CRYPTO=$PIN,
UPDATE=$PIN,
WRITE=$PIN;
}
# Extractable private keys are stored in transparent EFs.
# Encryption of the content is performed by libopensc.
EF extractable-key {
file-id = 3100;
structure = transparent;
ACL = *=NEVER,
READ=$PIN,
UPDATE=$PIN,
WRITE=$PIN;
}
# data objects are stored in transparent EFs.
EF data {
file-id = 3200;
structure = transparent;
ACL = *=NEVER,
READ=NONE,
UPDATE=$PIN,
WRITE=$PIN;
}
# private data objects are stored in transparent EFs.
EF privdata {
file-id = 3220;
structure = transparent;
ACL = *=NEVER,
READ=$PIN,
UPDATE=$PIN,
WRITE=$PIN;
}
EF public-key {
file-id = 3300;
structure = transparent;
ACL = *=NONE;
}
# Certificate template
EF certificate {
file-id = 3400;
structure = transparent;
ACL = *=NONE;
}
}
}
}
}
|