This function is an extension of AAL2ChangeEncryptedStaticPassword. It includes the enhanced security feature. This feature prevents potential man-in-the-middle attacks in the architecture integrating software Digipass authenticators. A server public key, such as a certificate, can be used in input to diversify the challenge.
This parameter is optional. If it is not used, this function is identical with AAL2ChangeEncryptedStaticPassword.
authenticator application BLOB. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.
TKernelParms *
CallParms
I
Structure of runtime parameters to use during this function call.
aat_ascii *
Challenge
I
String of 16 numeric characters, left-justified, null-terminated or right-padded with spaces. This parameter holds the challenge that was proposed to the user to generate the CESPR. This parameter is mandatory.
aat_ascii *
CESPR
I
16 hexadecimal characters, left-justified, null-terminated or right-padded with spaces. This parameter is the change-encrypted-static-password request generated by the Digipass 110 applet.
aat_ascii *
aServerPublicKey
I
String of up to 1024 hexadecimal characters, null-terminated. This parameter is used as a diversifier to prevent man-in-the-middle attacks. If this parameter is NULL, diversification will not take place.
