AAL2ProcVerifySignatureEsRpl

  • Published on Jul 9, 2025
  • 1 minute(s) read
Prev Next

Function prototype

aat_int32 AAL2ProcVerifySignatureEsRpl(
                                       aat_byte        *InReply,
                                       aat_int32       *ReplySize,
                                       TDigipassBlob   *DPData,
                                       aat_ascii       *aReturnHostCode,
                                       aat_int32       *ReturnHostCodeLen);

Description

This function processes a reply from the HSM to a command generated with either AAL2GenVerifySignatureEsCmd.

The signature validation with enhanced security on the HSM is identical to the functionality available with the Authentication Suite Server SDK Software e-Signature Validation Service. For information on the associated functions, refer to the Authentication Suite Server SDK C-C++ Programmer's Guide.

Parameters

  Table: Parameters (AAL2ProcVerifySignatureRpl)
TypeNameUseDescription
aat_byte *InReplyI

Up to 251 bytes that contain the VERIFY SIGNATURE command type and the output data from the verify signature function on the HSM:

  • Command type - 2 bytes
  • An authenticator application BLOB - 192 bytes
  • Return code - 4 bytes
  • Confirmation code length - 4 bytes
  • Confirmation code - up to 17 characters

Plus 32 bytes for Authentication Suite Server SDK internal use.

aat_int32ReplySizeIThe length of the InReply message.
TDigipassBlob *DPDataODigipass description data block. Upon return from the function call, this data block must be rewritten to the application database to reflect the changes.
aat_ascii * ReturnHostCodeO

String of up to 17 numeric or hexadecimal characters, left-justified, null-terminated, or right-padded with spaces. This is the confirmation code generated by Authentication Suite Server SDK. Leave NULL if not required.

aat_int32 * ReturnHostCodeLen I/O

Pointer to a long integer that in input contains the size of the ReturnHostCodeOut buffer, and in output contains the real length of the generated return host code. Leave NULL if not required.

Return codes

  Table: Return codes (AAL2ProcVerifySignatureEsRpl)
CodeMeaningCodeMeaning
0Success1009Invalid TLV total length
10001Success with context warning[1]1018Invalid TLV item pointer
10002Success with user warning[1]1019Missing mandatory TLV item
10003Success with user & context warning[1]1025Data buffer too small
10004Success with platform warning[1]1103Unlock Version 2 not supported
10005Success with platform & context warning[1]1116Response check digit not allowed
10006Success with platform & user warning[1]1117Challenge check digit not allowed
10007Success with platform & user & context warning[1]1118Unsupported BLOB
1Signature not verified-101Challenge too short
132Unsupported token type-102Challenge too long
203Sign error threshold reached-103Challenge check digit wrong
204Duplicate signature found-105Challenge minimum length not allowed
205Inactive days reached-106Challenge maximum length not allowed
206Chronological signature error-107Challenge number wrong
208Application disabled-108Challenge character invalid
272Invalid wrapped key-153Server public key too long
412Invalid checksum (software)-201Response length out of bounds
413Invalid Base64 format-202Response too short
414Invalid checksum (HSM)-203Response too long
510Invalid Digipass data pointer-204Response check digit wrong
701Invalid input buffer pointer-205Response character not decimal
910Invalid HSM command in reply-206Response character not hexadecimal
912StatusHSM invalid BLOB status-207Response character set not specified
913Invalid HSM key property-1501Memory allocation failed
951Invalid HSM key type for HSM decryption  
  1. Specific score-based authentication code (see Score-based DIGIPASS)