OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	04/29/2025 04:07:52 PM	rwxr-xr-x
📄 asepcos.profile	2.54 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 authentic.profile	2.86 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 cardos.profile	2.77 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 cyberflex.profile	2.85 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 entersafe.profile	3.8 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 epass2003.profile	4.18 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 flex.profile	3.09 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 gids.profile	230 bytes	04/09/2025 03:19:18 AM	rw-r--r--
📄 gpk.profile	2.85 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 ias_adele_admin1.profile	4.92 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 ias_adele_admin2.profile	4.9 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 ias_adele_common.profile	4.84 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 iasecc.profile	2.84 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 iasecc_admin_eid.profile	4.91 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 iasecc_generic_oberthur.profile	4.56 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 iasecc_generic_pki.profile	4.9 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 incrypto34.profile	2.65 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 isoApplet.profile	2.95 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 jcop.profile	2.16 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 miocos.profile	1.16 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 muscle.profile	3.38 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 myeid.profile	6.59 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 oberthur.profile	4.36 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 openpgp.profile	1.85 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 pkcs15.profile	3.88 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 rutoken.profile	5.38 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 rutoken_ecp.profile	5.9 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 rutoken_lite.profile	5.41 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 sc-hsm.profile	400 bytes	04/09/2025 03:19:18 AM	rw-r--r--
📄 setcos.profile	3.7 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 starcos.profile	2.69 KB	04/09/2025 03:19:18 AM	rw-r--r--
📄 westcos.profile	3.56 KB	04/09/2025 03:19:18 AM	rw-r--r--

Editing: epass2003.profile

#
# pkcs15 profile for entersafe
#
cardinfo {
    manufacturer	= "EnterSafe";
    min-pin-length	= 4;
	max-pin-length	= 16;
	pin-encoding	= ascii-numeric;
	pin-pad-char	= 0x00;
}

option default {
	macros {
		pin-flags		 = local, initialized, needs-padding;
		min-pin-length	 = 4;
		df_acl			 = *=NEVER;
		ef_acl			 = *=NEVER, READ=NONE, UPDATE=NONE, WRITE=NONE, DELETE=NONE;
		sf_acl			 = *=NEVER, UPDATE=NONE;
		protected		 = *=$PIN,READ=NONE;
        unprotected      = *=NONE;
		dir-size		 = 112;
		tinfo-size		 = 128;
		unusedspace-size = 128;
		odf-size		 = 256;
		aodf-size		 = 256;
		cdf-size		 = 512;
		prkdf-size		 = 256;
		pukdf-size		 = 256;
		dodf-size		 = 256;
		info-size		 = 128;
		maxPin-size      = 2;
	}
}

option onepin {
	macros {
		pin-flags		 = local, initialized, needs-padding;
#		df_acl			 = *=$PIN;
		df_acl			 = *=NEVER, CRYPTO=NONE, FILES=NONE, CREATE=NONE, DELETE=NONE;
		ef_acl			 = *=NEVER, READ=NONE, UPDATE=NONE, WRITE=NONE, DELETE=NONE;
		sf_acl			 = *=NEVER, UPDATE=NONE;
		protected		 = *=NEVER,READ=NONE, UPDATE=$PIN, DELETE=$PIN;
        unprotected      = *=NONE;
		dir-size		 = 112;
		tinfo-size		 = 128;
		unusedspace-size = 128;
		odf-size		 = 512;
		aodf-size		 = 256;
		cdf-size		 = 2048;
		prkdf-size		 = 1024;
		pukdf-size		 = 1024;
		dodf-size		 = 256;
		info-size		 = 128;
		maxPin-size      = 2;
	}
}

PIN so-pin {
	reference	= 1;
	attempts	= 6;
	flags		= $pin-flags;
	min-length	= $min-pin-length;
}
PIN so-puk {
	attempts	= 6;
	flags		= $pin-flags;
	min-length	= $min-pin-length;
}
PIN user-pin {
	reference	= 2;
	attempts	= 6;
	flags		= $pin-flags;
	min-length	= $min-pin-length;
}
PIN user-puk {
	attempts	= 6;
	flags		= $pin-flags;
	min-length	= $min-pin-length;
}

# Additional filesystem info.
# This is added to the file system info specified in the
# main profile.
filesystem {
	DF MF {
	    ACL		= $df_acl;
	   	size	= 768;
		file-id		= 3F00;
		aid		= 65:6e:74:65:72:73:61:66:65:2d:66:69:70:73

BSO SKey-MF {
			file-id		= 5300;
			ACL		= $sf_acl
			size	= 4;
		}

EF DIR {
		    type		= EF;
			size		= $dir-size;
			ACL			= $ef_acl;
			file-id		= 2F00;
   			structure = linear-variable;
	    	}

DF PKCS15-AppDF {
		    ACL			= $df_acl;
		   	size		= 16000;

BSO SKey-AppDF {
				file-id		= 5301;
				ACL		= $sf_acl
				size	= 32;
			}

EF MAXPIN {
			file-id = 9F00;
			size	= $maxPin-size;
			ACL		= $unprotected;
	    	}
 
	    	EF PKCS15-ODF {
			size	= $odf-size;
			ACL		= $protected;
	    	}

EF PKCS15-TokenInfo {
			size	= $tinfo-size;
			ACL		= $protected;
	    	}

EF PKCS15-UnusedSpace {
			size    = $unusedspace-size;
			ACL		= $protected;
			}

EF PKCS15-AODF {
			size	= $aodf-size;
			ACL		= $protected;
	    	}

EF PKCS15-PrKDF {
			size	= $prkdf-size;
			ACL		= $protected;
	    	}

EF PKCS15-PuKDF {
			size	= $pukdf-size;
			ACL		= $protected;
	    	}

EF PKCS15-CDF {
			size	= $cdf-size;
			ACL		= $protected;
	    	}

EF PKCS15-DODF {
			size	= $dodf-size;
			ACL		= $protected;
	    	}

template key-domain {
				EF private-key {
		    	    file-id	   = 2900;
#type	= internal-ef;
					structure = 0xA3;
#ACL = READ=CHV1,UPDATE=CHV1,CRYPTO=CHV1;
					ACL = *=NONE;
				}

EF public-key {
    	    	    file-id	  = 3000;
   					structure = transparent;
					ACL	 = *=NONE;
        		}

# Certificate template
        		EF certificate {
            	    file-id	   = 3100;
            		structure  = transparent;
					ACL = READ=NONE,UPDATE=NONE;
        		}

# Extractable private keys are stored in transparent EFs.
        		# Encryption of the content is performed by libopensc.
        		EF extractable-key {
            	    file-id		   = 3200;
            		structure	   = transparent;
					ACL	  	  	   = *=NEVER,READ=NONE,UPDATE=$PIN;
        		}

# data objects are stored in transparent EFs.
        		EF data {
            	    file-id		= 3300;
            		structure	= transparent;
					ACL	  	  	= *=NEVER,READ=NONE,UPDATE=NONE;
        		}
        		# data objects are stored in transparent EFs.
        		EF privdata {
            	    file-id		= 3400;
            		structure	= transparent;
					ACL	  	  	= *=NEVER,READ=$PIN,UPDATE=$PIN;
        		}

}
		}
    }
}