OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/18/2025 08:12:00 AM	rwxr-xr-x
📄 asepcos.profile	2.54 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 authentic.profile	2.86 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 cardos.profile	2.77 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 cyberflex.profile	2.85 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 entersafe.profile	3.8 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 epass2003.profile	4.18 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 flex.profile	3.09 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 gids.profile	230 bytes	04/01/2024 07:06:24 AM	rw-r--r--
📄 ias_adele_admin1.profile	4.92 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 ias_adele_admin2.profile	4.9 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 ias_adele_common.profile	4.84 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc.profile	2.84 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc_admin_eid.profile	4.91 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc_generic_oberthur.profile	4.56 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc_generic_pki.profile	4.9 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 isoApplet.profile	2.93 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 muscle.profile	3.38 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 myeid.profile	6.64 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 oberthur.profile	4.36 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 openpgp.profile	1.85 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 pkcs15.profile	3.86 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 rutoken.profile	5.38 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 rutoken_ecp.profile	6.07 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 rutoken_lite.profile	5.58 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 sc-hsm.profile	400 bytes	04/01/2024 07:06:24 AM	rw-r--r--
📄 setcos.profile	3.7 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 starcos.profile	2.69 KB	04/01/2024 07:06:24 AM	rw-r--r--

Editing: myeid.profile

#
# PKCS15 r/w profile for MyEID cards
#

cardinfo {
	label           = "MyEID";
	manufacturer    = "Aventra Ltd.";
	min-pin-length	= 4;
	max-pin-length	= 8;
	pin-encoding	= ascii-numeric;
   	pin-pad-char	= 0xFF;
}

#
# The following controls some aspects of the PKCS15 we put onto
# the card.
#
pkcs15 {
    # Put certificates into the CDF itself?
    direct-certificates = no;
    # Put the DF length into the ODF file?
    encode-df-length    = no;
    # Have a lastUpdate field in the EF(TokenInfo)?
    do-last-update	    = no;
}

option default {
    macros {
        #protected   = READ=NONE, UPDATE=CHV1, DELETE=CHV2;
        #unprotected = READ=NONE, UPDATE=CHV1, DELETE=CHV1;
		
	unusedspace-size = 510;
	odf-size	     = 255;
	aodf-size	     = 255;
	cdf-size	     = 1530;
	cdf-trusted-size = 510;
	prkdf-size	     = 1530;
	pukdf-size	     = 1530;
	skdf-size	     = 1530;
	dodf-size	     = 1530;
    }
}

# Define reasonable limits for PINs and PUK
# Note that we do not set a file path or reference
# here; that is done dynamically.
PIN user-pin {
    reference  = 1;
    min-length = 4;
    max-length = 8;
    attempts   = 3;
    flags      = initialized, needs-padding;
}

PIN user-puk {
    min-length = 4;
    max-length = 8;
    attempts   = 10;
    flags      = needs-padding;
}

PIN so-pin {
    reference  = 3;
    auth-id    = FF;
    min-length = 4;
    max-length = 8;
    attempts   = 3;
    flags      = initialized, soPin, needs-padding;
}

PIN so-puk {
    min-length = 4;
    max-length = 8;
    attempts   = 10;
   flags       = needs-padding;
}

# Additional filesystem info.
# This is added to the file system info specified in the
# main profile.
filesystem {
    DF MF {
        path  = 3F00;
        type  = DF;
        acl	  = CREATE=$PIN, DELETE=$SOPIN;

# This is the DIR file
        EF DIR {	    
    	    file-id   = 2F00;
            structure = transparent;
	        size      = 128;
	        acl	      = READ=NONE, UPDATE=$SOPIN, DELETE=$SOPIN;
	    }
        DF PKCS15-AppDF {
 	        type      = DF;
	        file-id   = 5015;
	        aid       = A0:00:00:00:63:50:4B:43:53:2D:31:35;
            acl       = DELETE=$PIN, CREATE=$PIN;
	    
            EF PKCS15-ODF {
        	    file-id   = 5031;
                structure = transparent;
        	    size      = $odf-size;
	            acl       = READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
        	}

EF PKCS15-TokenInfo {
        	   file-id	  = 5032;
        	   size		  = 160;
	           structure  = transparent;
        	   acl	      = READ=NONE, UPDATE=$SOPIN, DELETE=$SOPIN;
            }

EF PKCS15-UnusedSpace {
                file-id	  = 5033;
                structure = transparent;
                size	  = $unusedspace-size;
                acl	      = READ=NONE, UPDATE=$SOPIN, DELETE=$SOPIN;
            }

EF PKCS15-AODF {
                file-id	  = 4401;
                structure = transparent;
                size	  = $aodf-size;
                acl	      = READ=NONE, UPDATE=$SOPIN, DELETE=$SOPIN;
            }

EF PKCS15-PrKDF {
                file-id	  = 4402;
                structure = transparent;
                size	  = $prkdf-size;
                acl	      = *=NEVER, READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
            }

EF PKCS15-PuKDF {
                file-id	  = 4404;
                structure = transparent;
                size	  = $pukdf-size;
                acl	      = *=NEVER, READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
            }

EF PKCS15-SKDF {
                file-id	  = 4407;
                structure = transparent;
                size	  = $skdf-size;
                acl	      = *=NEVER, READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
            }

EF PKCS15-CDF {
                file-id	  = 4403;
                structure = transparent;
                size	  = $cdf-size;
                acl	      = *=NEVER, READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
            }

EF PKCS15-CDF-TRUSTED {
                file-id	  = 4405;
                structure = transparent;
                size	  = $cdf-trusted-size;
                acl	      = *=NEVER, READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
            }

EF PKCS15-DODF {
                file-id	  = 4406;
                structure = transparent;
                size	  = $dodf-size;
                acl       = *=NEVER, READ=NONE, UPDATE=$PIN, DELETE=$SOPIN;
            }
            
            EF template-private-key {
                type      = internal-ef;
                file-id   = 4B01;
                acl       = CRYPTO=$PIN, UPDATE=$PIN, DELETE=$PIN, GENERATE=$PIN;
            }
            
            EF template-secret-key {
                type      = internal-ef;
                file-id   = 4D01;
                acl       = CRYPTO=$PIN, UPDATE=$PIN, DELETE=$PIN, GENERATE=$PIN;
            }
            
            EF template-public-key {
                structure = transparent;
                file-id	  = 5501;
                acl	      = READ=NONE, UPDATE=$PIN, DELETE=$PIN, GENERATE=$PIN;
            }

EF template-certificate {
                file-id   = 4301;
                structure = transparent;
                acl       = READ=NONE, UPDATE=$PIN, DELETE=$PIN;
            }

template key-domain {
                # This is a dummy entry - pkcs15-init insists that
                # this is present
                EF private-key {
                    file-id   = 4B01;
                    type      = internal-ef;
                    acl       = CRYPTO=$PIN, UPDATE=$PIN, DELETE=$PIN, GENERATE=$PIN;
                }
                EF public-key {
                    file-id   = 5501;
                    structure = transparent;
                    acl       = READ=NONE, UPDATE=$PIN, DELETE=$PIN, GENERATE=$PIN;
                }
                EF secret-key {
                    file-id   = 4D01;
                    type      = internal-ef;
                    acl       = CRYPTO=$PIN, UPDATE=$PIN, DELETE=$PIN, GENERATE=$PIN;
                }
		
                # Certificate template
                EF certificate {
                    file-id	  = 4301;
                    structure = transparent;
                    acl       = READ=NONE, UPDATE=$PIN, DELETE=$PIN;
                }
                EF privdata {
                    file-id   = 4501;
                    structure = transparent;
                    acl       = READ=$PIN, UPDATE=$PIN, DELETE=$PIN;
                }
                EF data {
                    file-id   = 4601;
                    structure = transparent;
                    acl       = READ=NONE, UPDATE=$PIN, DELETE=$PIN;
                }
            }
	    }
    }
}