def test_full1():
# AN12196 Section 5.4 Page 22
# Command data in CommMode.FULL
m = CryptoComm(
k_ses_auth_mac=binascii.unhexlify("4C6626F5E72EA694202139295C7A7FC7"),
k_ses_auth_enc=binascii.unhexlify("1309C877509E5A215007FF0ED19CA564"),
ti=binascii.unhexlify("9D00C4DF"),
cmd_counter=0)
# this command takes ordinary plain APDU and turns it into CommMode.FULL encrypted one
# the example of plain APDU was not taken from the docs but rather written by hand
# notice data_offset=7 - this is to specify where is the boundary between command header and command data,
# just because header gets through unencrypted
apdu = binascii.unhexlify(
"908D000087020000008000000051D1014D550463686F6F73652E75726C2E636F"
"6D2F6E7461673432343F653D3030303030303030303030303030303030303030"
"30303030303030303030303026633D3030303030303030303030303030303000"
"0000000000000000000000000000000000000000000000000000000000000000"
"00000000000000000000000000")
res = m.encrypt_apdu(apdu, data_offset=7)
# check whether we arrived at the same result as in docs
proper = binascii.unhexlify(
"908D00009F02000000800000421C73A27D827658AF481FDFF20A5025B559D0E3"
"AA21E58D347F343CFFC768BFE596C706BC00F2176781D4B0242642A0FF5A42C4"
"61AAF894D9A1284B8C76BCFA658ACD40555D362E08DB15CF421B51283F9064BC"
"BE20E96CAE545B407C9D651A3315B27373772E5DA2367D2064AE054AF996C6F1"
"F669170FA88CE8C4E3A4A7BBBEF0FD971FF532C3A802AF745660F2B4D1D9A849"
"9661EBF300")
assert res == proper
status_code, data = m.parse_response(
binascii.unhexlify("FC222E5F7A5424529100"))
assert status_code == b"\x91\x00"
assert data == b""
def test_full2():
# AN12196 Section 6.12 Page 36
m = CryptoComm(
k_ses_auth_mac=binascii.unhexlify("FC4AF159B62E549B5812394CAB1918CC"),
k_ses_auth_enc=binascii.unhexlify("7A93D6571E4B180FCA6AC90C9A7488D4"),
ti=binascii.unhexlify("7614281A"),
cmd_counter=0)
apdu = binascii.unhexlify("908D000011030000000A00000102030405060708090A00")
# convert CommMode.PLAIN into CommMode.FULL
res = m.encrypt_apdu(apdu, data_offset=7)
# compare with docs
proper = binascii.unhexlify(
"908D00001F030000000A00006B5E6804909962FC4E3FF5522CF0F8436C0C53315B9C73AA00")
assert res == proper
status_code, data = m.parse_response(binascii.unhexlify("C26D236E4A7C046D9100"))
assert status_code == b"\x91\x00"
assert data == b""
def test_full3():
# AN12196 Section 7.3 Page 43
# Response data in CommMode.FULL
m = CryptoComm(
k_ses_auth_mac=binascii.unhexlify("379D32130CE61705DD5FD8C36B95D764"),
k_ses_auth_enc=binascii.unhexlify("2B4D963C014DC36F24F69A50A394F875"),
ti=binascii.unhexlify("DF055522"))
apdu = binascii.unhexlify("905100000000")
res = m.encrypt_apdu(apdu, data_offset=0)
proper = binascii.unhexlify("90510000088E2C155ADDA99BE300")
assert res == proper
# first let's validate MAC and extract the encrypted data from APDU as we would do with CommMode.MAC
status_code, data = m.parse_response(
binascii.unhexlify("70756055688505B52A5E26E59E329CD6595F672298EA41B79100"))
assert status_code == binascii.unhexlify("9100")
assert data == binascii.unhexlify("70756055688505B52A5E26E59E329CD6")
# if we arrived here, the MACt signature seems to be valid, let's decrypt the response data
assert m.decrypt_response(data) == binascii.unhexlify("04958CAA5C5E80")