Skip to content

Correct the ASN.1 documentation of the 2.0.0 branch to reflect what is in the code #85

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
suut wants to merge 1 commit into
base: release/v2-0-0-fips
Choose a base branch
from
Open

Correct the ASN.1 documentation of the 2.0.0 branch to reflect what is in the code #85

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions doc/asn1/OpenFIPS201-GET-STATUS.asn
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,10 @@ OpenFIPS201-GET-STATUS-Schema DEFINITIONS IMPLICIT TAGS ::=
BEGIN

AppletState ::= ENUMERATED {
selectable (3),
secured (7),
locked (15)
installed (3),
selectable (7),
secured (15),
locked (128)

@suut suut Jul 11, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

locked is more like -128 as it would be encoded as 80 while 128 would be 0080 in proper BER

But it's theoretical since you will never be able to send GET STATUS if the applet is locked, and same thing for installed

}

OperatorRole ::= ENUMERATED {
Expand Down
18 changes: 1 addition & 17 deletions doc/asn1/OpenFIPS201-PUT-DATA.asn
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,6 @@ PutDataRequest ::= CHOICE {
createVerifierRequest [APPLICATION 5] PutDataCreateVerifierRequest,
createKeyRequest [APPLICATION 6] PutDataCreateKeyRequest,
updateConfigRequest [APPLICATION 8] PutDataUpdateConfigRequest,
deleteObjectRequest [APPLICATION 9] PutDataDeleteObjectRequest,
deletePinRequest [APPLICATION 10] PutDataDeletePinRequest,
deleteKeyRequest [APPLICATION 11] PutDataDeleteKeyRequest,

secureRequest [APPLICATION 31] NULL
}
Expand All @@ -23,10 +20,6 @@ PutDataCreateObjectRequest ::= SEQUENCE {
adminKey [17] OCTET STRING (SIZE(1)) OPTIONAL
}

PutDataDeleteObjectRequest ::= SEQUENCE {
id [11] OCTET STRING (SIZE(1..3))
}

PutDataCreateVerifierRequest ::= SEQUENCE {
id [11] OCTET STRING (SIZE(1)),
modeContact [12] AccessMode,
Expand All @@ -42,10 +35,6 @@ PutDataCreateVerifierRequest ::= SEQUENCE {
restrictUpdate [22] BOOLEAN OPTIONAL
}

PutDataDeletePinRequest ::= SEQUENCE {
id [11] OCTET STRING (SIZE(1))
}

PutDataCreateKeyRequest ::= SEQUENCE {
id [11] OCTET STRING (SIZE(1)),

Expand All @@ -58,11 +47,6 @@ PutDataCreateKeyRequest ::= SEQUENCE {
keyAttribute [16] OCTET STRING (SIZE(1))
}

PutDataDeleteKeyRequest ::= SEQUENCE {
id [11] OCTET STRING (SIZE(1)),
keyMechanism [14] KeyMechanism OPTIONAL
}

PutDataUpdateConfigRequest ::= SEQUENCE {
-- If set to TRUE, the applet may not be selected over the contactless interface
restrictContactlessGlobal [0] BOOLEAN OPTIONAL,
Expand Down Expand Up @@ -164,7 +148,7 @@ KeyMechanism ::= ENUMERATED {
rsa1024 (6),
rsa2048 (7),
rsa3072 (5),
rsa4096 (4),
rsa4096 (22),
aes128 (8),
aes192 (10),
aes256 (12),
Expand Down