This function processes a reply from the HSM to a deactivation message command generated with AAL2GenVerifyMessageSignatureCmd.
The message signature validation on the HSM is identical to the functionality available with the Authentication Suite Server SDK Software Digipass Multi-Device Activation Service and the Digipass Secure Channel Service. For information on the associated functions, refer to the Authentication Suite Server SDK C-C++ Programmer's Guide.
Score-based Digipass
For Digipass devices that integrate the score-based algorithm, the HSM module performs a score-based message signature validation which allows retrieving the Digipass scoring value. Once the HSM module has successfully validated the signature, it returns either SUCCESS or SUCCESS with the relevant scoring warning code. See return codes in Table: Return codes (AAL2ProcVerifyMessageSignatureRpl) for more details.
Up to 231 bytes that contain the MESSAGE SIGNATURE VALIDATION command type and the output data from the message signature validation function on the HSM:
Command type - 2 bytes
An authenticator application BLOB - 192 bytes
Confirmation code - up to 17 characters
Confirmation code length - 4 bytes
Return code - 4 bytes
Plus 16 bytes for Authentication Suite Server SDK internal use.
aat_int32
ReplySize
I
The length of the InReply message.
TDigipassBlob *
DPData
O
authenticator application BLOB of the Digipass instance to use for the signature verification. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.
aat_ascii *
ConfirmationCode
O
String of up to 16+1 numeric or hexadecimal characters, left-justified, null-terminated or right-padded with spaces. This is the confirmation code generated by Authentication Suite Server SDK for this signature (recommended buffer size is 17 bytes).
aat_int32 *
ConfirmationCodeLen
O
In input, this parameter must indicate the size of the allocated buffer for the ConfirmationCode parameter (recommended 17 bytes). In output, this parameter indicates the length of the ConfirmationCode string (without the null-terminated character).
