OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/18/2025 08:12:00 AM	rwxr-xr-x
📄 asepcos.profile	2.54 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 authentic.profile	2.86 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 cardos.profile	2.77 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 cyberflex.profile	2.85 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 entersafe.profile	3.8 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 epass2003.profile	4.18 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 flex.profile	3.09 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 gids.profile	230 bytes	04/01/2024 07:06:24 AM	rw-r--r--
📄 ias_adele_admin1.profile	4.92 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 ias_adele_admin2.profile	4.9 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 ias_adele_common.profile	4.84 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc.profile	2.84 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc_admin_eid.profile	4.91 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc_generic_oberthur.profile	4.56 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 iasecc_generic_pki.profile	4.9 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 isoApplet.profile	2.93 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 muscle.profile	3.38 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 myeid.profile	6.64 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 oberthur.profile	4.36 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 openpgp.profile	1.85 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 pkcs15.profile	3.86 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 rutoken.profile	5.38 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 rutoken_ecp.profile	6.07 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 rutoken_lite.profile	5.58 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 sc-hsm.profile	400 bytes	04/01/2024 07:06:24 AM	rw-r--r--
📄 setcos.profile	3.7 KB	04/01/2024 07:06:24 AM	rw-r--r--
📄 starcos.profile	2.69 KB	04/01/2024 07:06:24 AM	rw-r--r--

Editing: cardos.profile

#
# PKCS15 r/w profile for Siemens CardOS M4 
# smart cards and crypto tokens (for example Aladdin eToken)
#
cardinfo {
    max-pin-length	= 8;
    pin-encoding	= ascii-numeric;
    pin-pad-char	= 0x00;
}

# Define reasonable limits for PINs and PUK
# We set the reference for SO pin+puk here, because
# those are hard-coded (if a PUK us assigned).
PIN so-pin {
    reference = 0;
}
PIN so-puk {
    reference = 1;
}
PIN user-pin {
    attempts	= 3;
}
PIN user-puk {
    attempts	= 10;
}

# Additional filesystem info.
# This is added to the file system info specified in the
# main profile.
filesystem {
    DF MF {
        DF PKCS15-AppDF {
	    size		= 4096;

# Prevent unauthorized updates of basic security
	    # objects via PUT DATA OCI.
	    # ACL = UPDATE=NEVER;
	    ACL = UPDATE=$SOPIN;

# Bump the size of the EF(PrKDF) - with split
	    # keys, we may need a little more room.
	    EF PKCS15-PrKDF {
		size		= 1024;
	    }

EF PKCS15-PuKDF {
		size		= 768;
	    }

EF PKCS15-CDF {
		size		= 1536;
	    }

# This template defines files for keys, certificates etc.
	    #
	    # When instantiating the template, each file id will be
	    # combined with the last octet of the object's pkcs15 id
	    # to form a unique file ID.
	    template key-domain {
		BSO private-key {
		}

EF public-key {
    	            file-id	= 3003;
    	            structure	= transparent;
		    ACL		= *=NEVER,
		    			READ=NONE,
					UPDATE=$PIN,
					ERASE=$PIN;
                }

# Certificate template
                EF certificate {
    	            file-id	= 3104;
    	            structure	= transparent;
		    ACL		= *=NEVER,
		    			READ=NONE,
					UPDATE=$PIN,
					ERASE=$PIN;
                }

# Extractable private keys are stored in transparent EFs.
	        # Encryption of the content is performed by libopensc.
                EF extractable-key {
    	            file-id	= 3201;
    	            structure	= transparent;
    	            ACL		= *=NEVER,
		    			READ=$PIN,
					UPDATE=$PIN,
					ERASE=$PIN;
                }

# data objects are stored in transparent EFs.
                EF data {
    	            file-id	= 3302;
    	            structure	= transparent;
    	            ACL		= *=NEVER,
					READ=NONE,
					UPDATE=$PIN,
					ERASE=$PIN;
                }

# private data objects are stored in transparent EFs.
                EF privdata {
    	            file-id	= 3403;
    	            structure	= transparent;
    	            ACL		= *=NEVER,
					READ=$PIN,
					UPDATE=$PIN,
					ERASE=$PIN;
                }

}

# This is needed when generating a key on-card.
	    EF tempfile {
	        file-id		= 7EAD;
		structure	= linear-variable-tlv;
		ACL		= *=NONE;
		size		= 512;
	    }
	}
    }
}