mirror of
https://github.com/veracrypt/VeraCrypt.git
synced 2025-11-13 03:48:26 -06:00
Add EMV functionality (#1080)
* Add basic strcture needed for EMV implementation * Add demo EMV functionality with C code pasted in a very dirty and unsafe way. NOT FINAL * Refactor IccExtractor Structure * Fix Makefile * fix include file * move global variables from h to c * revert to memcpy * fix icc data recovery functions * Add EMV functionalities on windows * Make EMVToken structures like SecurityToken * Define constants instead of hard coded values * Token structures created with inheritance * refactor TokenKeyfile to use inherit. + polymor. * add Token.h + Token.cpp in modules in VS2010 * Add a comment at each use of SecurityToken class or objects * SecurityTokenKeyfilesDialog preparation * Implemennt GetAvailableTokens in Token class on windows * merge * up (patching for Windows) * foreach Token.cpp corrected * Display EMV keyfiles on first window in graphic interface * Add token to Windows UI * EMVToken selection on OKButton on Linux * Keyfile.cpp optimization * Move getKeyfileData in the token class * EMV::Token GetAvailableKeyfiles() base * Move getKeyfileData in the token class on unix * Remove test comments * Warnings resolved * RemoveeSecurityTokenLibraryNotInitialized exception if at least one emv token is detected * Adding new files * Remove old files and add the new version to the windows project * Change make_shared to shared_ptr constructor * IccExtractor integration working on linux * Throwing card not EMV execption * catch error when not EMV type in EMVToken::GetAvailableKeyfiles * Change types to compile on windows * list all keyfiles, security keyfiles and emv keyfiles in command line * Change type to be coherent and remove old todo comments * Remove todo comments * Change indentation and resolve a bug from previous commit * Use polymorphism for GetKeyfileData and add export option for EMVTokens on Linux * Linux : Allow to export EMV Tokens in command lines, Windows : Disable the delete button when EMV Keyfiles are selected * Remove SlotId from TokenInfo as it is already in Token * Correct errors on Linux * Disable delete option if one EMV Token is selected on Linux * Fix bug enabling delete button if nothing is selected * emv data used as reference then burnt * use of normal files in linux corrected * help updated * help updated for export functionnality * option EMV added to graphic interface but not yet working * Bug fix : Allow to use multiple EMV on windows * EMV Option added to UserPreferences * EMV Option working for Linux * EMV option added to Windows (not working yet) * [NOT TESTED] EMV option for Windows * Working EMV option on Windows * EMV Option for data extraction working for volume creation * EMV Option for data extraction working for Mount * EMV Option for data extraction working for mounting favorites volumes * EMV Option for extraction working for Changing volume password, Set Derivation Key Algorithm and Add or remove keyfile from volume * Windows : re-checking EMV Option when getting data * Removing error catches in the IccDataExtractor classe (It only throws error now). Changing GetPan signature to resemble the other functions signatures more * Changing EMV errors - Only throwing ICCExtractionException from outside of the ICC module. - Catching all TLVExceptions and PCSCExceptions to throw the right ICCExtractionException - Deleting APDU exceptions. * First version of the documentation * Adding function pointers for winscard library (but it crashes VeraCrypt) * Debugging function pointers * The import of the library on windows work as expected now * Reverting EMVToken.cpp changes used to test to library import * Searching for the System32 path instead of hard codding it * Fixing the bug were VeraCrypt crashes if there is no readers when "add Token files" is clicked * Winscard library not initialized in object constructor anymore to delay it after EMVOption check * Remove winscard lib from windows dependencies * Properly displaying errors * Adding a dot in Language.xml * Catching TLVException * Removing unused code * Remove unusefull comments * Trying to fix 0x1f error * Update IccDataExtractor.cpp * Delete History.xml * Fix get data without get pan * Cleanup code * changes for linux compilation but linking not working * error handling for linux * erasing emv data * Burn PAN * Burn PAN from memory * Uncomment selfcheck before merging master * burn corrected * EMV errors handling for Linux * EMV working for Linux CLI * Doc : Winscard Linux package and VeraCrypt versions --------- Co-authored-by: doriandu45 <d45.poubelle@gmail.com> Co-authored-by: red4game <redemgaiming@gmail.com> Co-authored-by: Brice.Namy <brice.namy@insa-rennes.fr> Co-authored-by: vocthor <pieceo108@gmail.com> Co-authored-by: vocthor <67202139+vocthor@users.noreply.github.com> Co-authored-by: Andrei COCAN <andrei.cocan@insa-rennes.fr> Co-authored-by: AndreiCocan <95496161+AndreiCocan@users.noreply.github.com> Co-authored-by: francoisLEROUX <francois3443@gmail.com>
This commit is contained in:
mmauv
GitHub
231
src/Common/IccDataExtractor.h
Normal file
231
src/Common/IccDataExtractor.h
Normal file
@@ -0,0 +1,231 @@
|
||||
//
|
||||
// Created by bshp on 1/14/23.
|
||||
//
|
||||
|
||||
#ifndef NEWEMV_ICCDATAEXTRACTOR_H
|
||||
#define NEWEMV_ICCDATAEXTRACTOR_H
|
||||
|
||||
#include <iostream>
|
||||
#include <stdio.h>
|
||||
#include <stdlib.h>
|
||||
#include <string.h>
|
||||
#include <sstream>
|
||||
#include <vector>
|
||||
#include <iomanip>
|
||||
#include <memory>
|
||||
#include "Platform/PlatformBase.h"
|
||||
#include "TLVParser.h"
|
||||
|
||||
#ifdef __linux__
|
||||
#include <unistd.h>
|
||||
#endif
|
||||
|
||||
#if defined (TC_WINDOWS) && !defined (TC_PROTOTYPE)
|
||||
# include "Exception.h"
|
||||
#else
|
||||
# include "Platform/Exception.h"
|
||||
#endif
|
||||
|
||||
#ifdef TC_WINDOWS
|
||||
#include <winscard.h>
|
||||
#include <windows.h>
|
||||
#endif
|
||||
#ifdef TC_UNIX
|
||||
#undef BOOL
|
||||
#include <PCSC/winscard.h>
|
||||
using VeraCrypt::byte;
|
||||
#define BOOL int
|
||||
//#include <unistd.h> //Works without on windows
|
||||
#endif
|
||||
|
||||
#ifdef _WIN32
|
||||
#include <windows.h>
|
||||
#endif
|
||||
|
||||
#ifdef _WIN64
|
||||
#define ssize_t __int64
|
||||
#else
|
||||
#define ssize_t long
|
||||
#endif
|
||||
|
||||
#define SELECT_TYPE_SIZE 12 /* Size of the SELECT_TYPE APDU */
|
||||
|
||||
/* Winscard function pointers definitions for windows import */
|
||||
#ifdef TC_WINDOWS
|
||||
typedef LONG (WINAPI *SCardEstablishContextPtr)(DWORD dwScope,LPCVOID pvReserved1, LPCVOID pvReserved2, LPSCARDCONTEXT phContext);
|
||||
typedef LONG (WINAPI *SCardReleaseContextPtr)(SCARDCONTEXT hContext);
|
||||
typedef LONG (WINAPI *SCardConnectAPtr)(SCARDCONTEXT hContext,LPCSTR szReader,DWORD dwShareMode,DWORD dwPreferredProtocols,LPSCARDHANDLE phCard, LPDWORD pdwActiveProtocol);
|
||||
typedef LONG (WINAPI *SCardDisconnectPtr)(SCARDHANDLE hCard, DWORD dwDisposition);
|
||||
typedef LONG (WINAPI *SCardTransmitPtr)(SCARDHANDLE hCard,LPCSCARD_IO_REQUEST pioSendPci,const BYTE* pbSendBuffer, DWORD cbSendLength,LPSCARD_IO_REQUEST pioRecvPci,BYTE* pbRecvBuffer, LPDWORD pcbRecvLength);
|
||||
typedef LONG (WINAPI *SCardListReadersAPtr)(SCARDCONTEXT hContext,LPCSTR mszGroups,LPSTR mszReaders, LPDWORD pcchReaders);
|
||||
typedef LONG (WINAPI *SCardFreeMemoryPtr)(SCARDCONTEXT hContext,LPCVOID pvMem);
|
||||
#endif
|
||||
|
||||
namespace VeraCrypt
|
||||
{
|
||||
class IccDataExtractor {
|
||||
private:
|
||||
|
||||
/* Used for loading winscard on windows */
|
||||
#ifdef TC_WINDOWS
|
||||
/* Winscard Library Handle */
|
||||
HMODULE WinscardLibraryHandle;
|
||||
|
||||
/* Winscard function pointers */
|
||||
SCardEstablishContextPtr WSCardEstablishContext;
|
||||
SCardReleaseContextPtr WSCardReleaseContext;
|
||||
SCardConnectAPtr WSCardConnectA;
|
||||
SCardDisconnectPtr WSCardDisconnect;
|
||||
SCardFreeMemoryPtr WSCardFreeMemory;
|
||||
SCardListReadersAPtr WSCardListReadersA;
|
||||
SCardTransmitPtr WSCardTransmit;
|
||||
|
||||
/* Is the winscard library loaded */
|
||||
static bool Initialized;
|
||||
#endif
|
||||
|
||||
/* SELECT_TYPES FOR DIFFERENT AIDs*/
|
||||
const static BYTE SELECT_MASTERCARD[SELECT_TYPE_SIZE];
|
||||
const static BYTE SELECT_VISA[SELECT_TYPE_SIZE];
|
||||
const static BYTE SELECT_AMEX[SELECT_TYPE_SIZE];
|
||||
const static BYTE * SELECT_TYPES[3];
|
||||
|
||||
|
||||
SCARDCONTEXT hContext; /* Handle that identifies the resource manager context.*/
|
||||
|
||||
SCARDHANDLE hCard; /* A handle that identifies the connection to the smart card in the designated reader*/
|
||||
|
||||
std::vector<char*> readers; /* Card reader list */
|
||||
|
||||
unsigned long int nbReaders; /* Number of connected (available) readers */
|
||||
|
||||
LPSTR mszReaders; /* Names of the reader groups defined to the system, as a multi-string. Use a NULL value to
|
||||
* list all readers in the system */
|
||||
|
||||
DWORD dwActiveProtocol; /* A flag that indicates the established active protocol.
|
||||
* SCARD_PROTOCOL_T0: An asynchronous, character-oriented half-duplex transmission protocol.
|
||||
* SCARD_PROTOCOL_T1: An asynchronous, block-oriented half-duplex transmission protocol.*/
|
||||
|
||||
|
||||
/* Establishing the resource manager context (the scope) within which database operations are performed.
|
||||
* The module of the smart card subsystem that manages access to multiple readers and smart cards. The
|
||||
* resource manager identifies and tracks resources, allocates readers and resources across multiple
|
||||
* applications,and supports transaction primitives for accessing services available on a given card.*/
|
||||
int EstablishRSContext();
|
||||
|
||||
/* Connecting to the card in the given reader*/
|
||||
int ConnectCard(unsigned long int reader_nb);
|
||||
|
||||
/* Disconnect the card currently connected*/
|
||||
int DisconnectCard();
|
||||
|
||||
/* Testing if the card contains the application of the given EMV type */
|
||||
bool TestingCardType(const int SELECT_TYPE_NUMBER);
|
||||
|
||||
/* Getting the ICC Public Key Certificates and the Issuer Public Key Certificates by parsing the application
|
||||
* (!NEED TO TEST CARD TYPE TO SELECT APPLICATION FIRST!)*/
|
||||
void GetCerts(vector<byte> &CERTS);
|
||||
|
||||
/* Getting CPCL data from the card and put it into a reference*/
|
||||
void GetCPCL(vector<byte> &v);
|
||||
|
||||
/* Getting the PAN by parsing the application
|
||||
* (!NEED TO TEST CARD TYPE TO SELECT APPLICATION FIRST!)*/
|
||||
void GetPAN(vector<byte> &v);
|
||||
|
||||
/* Helper function to make a string from plain arrays and various standard containers of bytes */
|
||||
template<typename TInputIter>
|
||||
void make_hex_string(TInputIter first, TInputIter last, std::string& panString, bool use_uppercase = true, bool insert_spaces = false);
|
||||
|
||||
public:
|
||||
IccDataExtractor();
|
||||
|
||||
~IccDataExtractor();
|
||||
|
||||
/* Used to initialize the winscard library on windows to make sure the dll is in System32 */
|
||||
#ifdef TC_WINDOWS
|
||||
void IccDataExtractor::InitLibrary();
|
||||
#endif
|
||||
|
||||
/* Detecting available readers and filling the reader table. Returns
|
||||
* the number of available readers */
|
||||
unsigned long GetReaders();
|
||||
|
||||
|
||||
/* Getting an ICC Public Key Certificates, an Issuer Public Key Certificates and the CPCL data
|
||||
* from the card designated by the reader number. Appending them into a byte vector */
|
||||
void GettingAllCerts(int readerNumber, vector<byte> &v);
|
||||
|
||||
/* Getting the PAN from the card designated by the reader number */
|
||||
void GettingPAN(int readerNumber, string& panString);
|
||||
};
|
||||
|
||||
struct PCSCException: public Exception
|
||||
{
|
||||
PCSCException(LONG errorCode = (LONG) -1): ErrorCode(errorCode), SubjectErrorCodeValid(false), SubjectErrorCode((uint64)-1){}
|
||||
PCSCException(LONG errorCode, uint64 subjectErrorCode): ErrorCode(errorCode), SubjectErrorCodeValid(true), SubjectErrorCode(subjectErrorCode){}
|
||||
|
||||
#ifdef TC_HEADER_Platform_Exception
|
||||
virtual ~PCSCException() throw () { }
|
||||
TC_SERIALIZABLE_EXCEPTION(PCSCException);
|
||||
#else
|
||||
|
||||
void Show(HWND parent) const;
|
||||
#endif
|
||||
|
||||
operator string () const;
|
||||
LONG GetErrorCode() const { return ErrorCode; }
|
||||
|
||||
protected:
|
||||
LONG ErrorCode;
|
||||
bool SubjectErrorCodeValid;
|
||||
uint64 SubjectErrorCode;
|
||||
};
|
||||
|
||||
#ifdef TC_HEADER_Platform_Exception
|
||||
|
||||
#define TC_EXCEPTION(NAME) TC_EXCEPTION_DECL(NAME,Exception)
|
||||
|
||||
#undef TC_EXCEPTION_SET
|
||||
#define TC_EXCEPTION_SET \
|
||||
TC_EXCEPTION_NODECL (PCSCException); \
|
||||
TC_EXCEPTION (WinscardLibraryNotInitialized); \
|
||||
TC_EXCEPTION (InvalidEMVPath); \
|
||||
TC_EXCEPTION (EMVKeyfileDataNotFound); \
|
||||
TC_EXCEPTION (EMVPANNotFound); \
|
||||
TC_EXCEPTION (EMVUnknownCardType);
|
||||
TC_EXCEPTION_SET;
|
||||
|
||||
#undef TC_EXCEPTION
|
||||
|
||||
#else // !TC_HEADER_Platform_Exception
|
||||
|
||||
struct WinscardLibraryNotInitialized: public Exception
|
||||
{
|
||||
void Show(HWND parent) const { Error("WINSCARD_MODULE_INIT_FAILED", parent); }
|
||||
};
|
||||
|
||||
struct InvalidEMVPath: public Exception
|
||||
{
|
||||
void Show(HWND parent) const { Error("INVALID_EMV_PATH", parent); }
|
||||
};
|
||||
|
||||
struct EMVKeyfileDataNotFound: public Exception
|
||||
{
|
||||
void Show(HWND parent) const { Error("EMV_KEYFILE_DATA_NOT_FOUND", parent); }
|
||||
};
|
||||
|
||||
struct EMVPANNotFound: public Exception
|
||||
{
|
||||
void Show(HWND parent) const { Error("EMV_PAN_NOT_FOUND", parent); }
|
||||
};
|
||||
|
||||
struct EMVUnknownCardType: public Exception
|
||||
{
|
||||
void Show(HWND parent) const { Error("EMV_UNKNOWN_CARD_TYPE", parent); }
|
||||
};
|
||||
|
||||
#endif // !TC_HEADER_Platform_Exception
|
||||
}
|
||||
|
||||
#endif //NEWEMV_ICCDATAEXTRACTOR_H
|
||||
Reference in New Issue
Block a user