AAL2ProcVerifySignatureRpl
  • 23 Jan 2025
  • 2 Minutes à lire
  • Sombre
    Lumière
  • PDF

AAL2ProcVerifySignatureRpl

  • Sombre
    Lumière
  • PDF

The content is currently unavailable in French. You are viewing the default English version.
Résumé de l’article

Function prototype

aat_int32 AAL2ProcVerifySignatureRpl(
                                     aat_byte        *InReply,
                                     aat_int32       *ReplySize,
                                     TDigipassBlob   *DPData,
                                     aat_ascii       *aReturnHostCodeOut,
                                     aat_int32       *ReturnHostCodeLenOut);

Description

This function processes a reply from the HSM to a command generated with either AAL2GenVerifySignatureCmd or AAL2GenVerifySignatureCmdEx.

The signature validation with enhanced security on the HSM is identical to the functionality available with the Authentication Suite Server SDK Software e-Signature Validation Service. For information on the associated functions, refer to the Authentication Suite Server SDK C-C++ Programmer's Guide.

Score-based Digipass

For Digipass devices that integrate the score-based algorithm, the HSM module performs a score-based signature validation which allows retrieving the Digipass scoring value. Once the HSM module has successfully validated the signature, it returns either SUCCESS or SUCCESS with the relevant scoring warning code. See the list of return codes in Table: Return codes (AAL2ProcVerifySignatureRpl) for more details.

Parameters

  Table: Parameters (AAL2ProcVerifySignatureRpl)
TypeNameUseDescription
aat_byte *InReplyI

Up to 251 bytes that contain the VERIFY SIGNATURE command type and the output data from the verify signature function on the HSM:

  • Command type - 2 bytes
  • An authenticator application BLOB - 192 bytes
  • Return code - 4 bytes
  • Confirmation code length - 4 bytes
  • Confirmation code - up to 17 characters

Plus 32 bytes for Authentication Suite Server SDK internal use.

aat_int32ReplySizeIThe length of the InReply message.
TDigipassBlob *DPDataOauthenticator application BLOB. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.
aat_ascii * Return HostCodeOString of up to 17 numeric or hexadecimal characters, left-justified, null-terminated, or right-padded with spaces. This is the confirmation code generated by Authentication Suite Server SDK for this signature (recommended buffer size is 18 bytes).
aat_int32 * ReturnHostCodeLen I/OPointer to a long integer that in input contains the size of the ReturnHostCodeOut buffer, and in output contains the real length of the generated return host code. Leave NULL if not required.

Return codes

  Table:  Return codes (AAL2ProcVerifySignatureRpl)
CodeMeaningCodeMeaning
0Success951Invalid HSM key type for HSM decryption
10001Success with context warning*1009Invalid TLV total length
10002Success with user warning*1018Invalid TLV item pointer
10003Success with user & context warning*1019Missing mandatory TLV item
10004Success with platform warning*1025Data buffer too small
10005Success with platform & context warning*1103Unlock Version 2 not supported
10006Success with platform & user warning*1116Response check digit not allowed
10007Success with platform & user & context warning*1117Challenge check digit not allowed
1Signature not verified1118Unsupported BLOB
132Unsupported token type-101Challenge too short
203Sign error threshold reached-102Challenge too long
204Duplicate signature found-103Challenge check digit wrong
205Inactive days reached-105Challenge minimum length not allowed
206Chronological signature error-106Challenge maximum length not allowed
208Application disabled-107Challenge number wrong
272Invalid wrapped key-108Challenge character invalid
412Invalid checksum (software)-201Response length out of bounds
413Invalid Base64 format-202Response too short
414Invalid checksum (HSM)-203Response too long
510Invalid Digipass data pointer-204Response check digit wrong
701Invalid Input Buffer Pointer-205Response character not decimal
910Invalid HSM command in reply-206Response character not hexadecimal
912HSM Invalid BLOB Status-207Response character set not specified
913Invalid HSM key property-1501Memory allocation failed

* Specific score-based authentication codes; for more information, refer to  Score-based Digipass.


Cet article vous a-t-il été utile ?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Ozzy, facilitant la découverte de connaissances grâce à l’intelligence conversationnelle