github/RRG-Proxmark3
1
0
Fork 0
mirror of https://github.com/RfidResearchGroup/proxmark3.git synced 2025-08-23 22:55:37 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #1238 from merlokk/emv_ssad

Browse source 
ApplePay CDA check
This commit is contained in:
Oleg Moiseenko 2021-04-08 18:29:40 +03:00 • committed by GitHub
commit 9c64d2f4e0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 23 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

4
client/src/emv/cmdemv.c
View file

@ -1143,10 +1143,14 @@ static int CmdEMVExec(const char *Cmd) {
// CDA // CDA
PrintAndLogEx(NORMAL, "\n* CDA:"); PrintAndLogEx(NORMAL, "\n* CDA:");
struct tlvdb *ac_tlv = tlvdb_parse_multi(buf, len); struct tlvdb *ac_tlv = tlvdb_parse_multi(buf, len);
if (tlvdb_get(ac_tlv, 0x9f4b, NULL)) {
res = trCDA(tlvRoot, ac_tlv, pdol_data_tlv, cdol_data_tlv); res = trCDA(tlvRoot, ac_tlv, pdol_data_tlv, cdol_data_tlv);
if (res) { if (res) {
PrintAndLogEx(NORMAL, "CDA error (%d)", res); PrintAndLogEx(NORMAL, "CDA error (%d)", res);
} }
} else {
PrintAndLogEx(NORMAL, "\n* Signed Dynamic Application Data (0x9f4b) not present");
}
free(ac_tlv); free(ac_tlv);
free(cdol_data_tlv); free(cdol_data_tlv);

2
client/src/emv/emv_pki.c
View file

@ -349,7 +349,7 @@ unsigned char *emv_pki_sdatl_fill(const struct tlvdb *db, size_t *sdatl_len) {
} }
struct tlvdb *emv_pki_recover_dac_ex(const struct emv_pk *enc_pk, const struct tlvdb *db, const struct tlv *sda_tlv, bool showData) { struct tlvdb *emv_pki_recover_dac_ex(const struct emv_pk *enc_pk, const struct tlvdb *db, const struct tlv *sda_tlv, bool showData) {
size_t data_len; size_t data_len = 0;
// Static Data Authentication Tag List // Static Data Authentication Tag List
size_t sdatl_len; size_t sdatl_len;

8
client/src/emv/emvcore.c
View file

@ -970,18 +970,22 @@ int trCDA(struct tlvdb *tlv, struct tlvdb *ac_tlv, struct tlv *pdol_data_tlv, st
sprint_hex(icc_pk->serial, 3) sprint_hex(icc_pk->serial, 3)
); );
// Signed Static Application Data (SSAD) check
const struct tlv *ssad_tlv = tlvdb_get(tlv, 0x93, NULL);
if (ssad_tlv && ssad_tlv->len > 1) {
struct tlvdb *dac_db = emv_pki_recover_dac(issuer_pk, tlv, sda_tlv); struct tlvdb *dac_db = emv_pki_recover_dac(issuer_pk, tlv, sda_tlv);
if (dac_db) { if (dac_db) {
const struct tlv *dac_tlv = tlvdb_get(dac_db, 0x9f45, NULL); const struct tlv *dac_tlv = tlvdb_get(dac_db, 0x9f45, NULL);
PrintAndLogEx(SUCCESS, "SSAD verified (%s) (%02hhx:%02hhx)", _GREEN_("ok"), dac_tlv->value[0], dac_tlv->value[1]); PrintAndLogEx(SUCCESS, "Signed Static Application Data (SSAD) verified (%s) (%02hhx:%02hhx)", _GREEN_("ok"), dac_tlv->value[0], dac_tlv->value[1]);
tlvdb_add(tlv, dac_db); tlvdb_add(tlv, dac_db);
} else { } else {
PrintAndLogEx(ERR, "Error: SSAD verify error"); PrintAndLogEx(ERR, "Error: Signed Static Application Data (SSAD) verify error");
emv_pk_free(pk); emv_pk_free(pk);
emv_pk_free(issuer_pk); emv_pk_free(issuer_pk);
emv_pk_free(icc_pk); emv_pk_free(icc_pk);
return 4; return 4;
} }
}
PrintAndLogEx(INFO, "* * Check Signed Dynamic Application Data (SDAD)"); PrintAndLogEx(INFO, "* * Check Signed Dynamic Application Data (SDAD)");
struct tlvdb *idn_db = emv_pki_perform_cda_ex(icc_pk, tlv, ac_tlv, struct tlvdb *idn_db = emv_pki_perform_cda_ex(icc_pk, tlv, ac_tlv,