@trustchex/react-native-sdk 1.161.0

package/lib/module/Shared/EIDReader/defaultFileInfo.js

@@ -0,0 +1,29 @@
+"use strict";
+
+import { FileInfo } from "./fileInfo.js";
+import { FragmentBuffer } from "./fragmentBuffer.js";
+export class DefaultFileInfo extends FileInfo {
+  constructor(fid, length) {
+    super();
+    this.fid = fid;
+    this.buffer = new FragmentBuffer(length);
+  }
+  getBuffer() {
+    return this.buffer.getBuffer();
+  }
+  getFID() {
+    return this.fid;
+  }
+  getFileLength() {
+    return this.buffer.getLength();
+  }
+  toString() {
+    return this.fid.toString(16);
+  }
+  getSmallestUnbufferedFragment(offset, length) {
+    return this.buffer.getSmallestUnbufferedFragment(offset, length);
+  }
+  addFragment(offset, bytes) {
+    this.buffer.addFragmentBytes(offset, bytes);
+  }
+}

package/lib/module/Shared/EIDReader/defaultFileSystem.js

@@ -0,0 +1,171 @@
+"use strict";
+
+import { EIDService } from "./eidService.js";
+import { ByteArrayInputStream } from "./java/byteArrayInputStream.js";
+import { DefaultFileInfo } from "./defaultFileInfo.js";
+import { ISO7816_SW } from "./smartcards/iso7816.js";
+import { SecureMessagingWrapper } from "./secureMessagingWrapper.js";
+import { TripleDesSecureMessagingWrapper } from "./tripleDesSecureMessagingWrapper.js";
+import { TLVInputStream } from "./tlv/tlvInputStream.js";
+import { CVCAFile } from "./lds/cvcaFile.js";
+import { Buffer } from 'buffer';
+export class DefaultFileSystem {
+  static NO_SFI = -1;
+  static READ_AHEAD_LENGTH = 8;
+  constructor(service, isSFIEnabled, fidToSFI = new Map()) {
+    this.service = service;
+    this.fileInfos = new Map();
+    this.selectedFID = 0;
+    this.isSelected = false;
+    this.isSFIEnabled = isSFIEnabled;
+    this.fidToSFI = fidToSFI;
+    this.maxReadBinaryLength = EIDService.EXTENDED_MAX_TRANSCEIVE_LENGTH;
+  }
+  setWrapper(wrapper) {
+    this.oldWrapper = this.wrapper;
+    this.wrapper = wrapper;
+  }
+  getWrapper() {
+    return this.wrapper;
+  }
+  getMaxReadBinaryLength() {
+    return this.maxReadBinaryLength;
+  }
+  async getSelectedPath() {
+    const fileInfo = await this.getFileInfo();
+    if (fileInfo == null) {
+      return null;
+    } else {
+      return [fileInfo];
+    }
+  }
+  selectFile(fid) {
+    if (this.selectedFID === fid) {
+      return;
+    }
+    this.selectedFID = fid;
+    this.isSelected = false;
+  }
+  async readBinary(offset, length) {
+    let fileInfo = null;
+    try {
+      if (this.selectedFID <= 0) {
+        throw new Error('No file selected');
+      }
+      fileInfo = await this.getFileInfo();
+      if (fileInfo == null) {
+        throw new Error('Could not get file info');
+      }
+      length = Math.min(length, this.maxReadBinaryLength);
+      const fragment = fileInfo.getSmallestUnbufferedFragment(offset, length);
+      let responseLength = length;
+      let bytes = null;
+      if (fragment.getLength() > 0) {
+        if (this.isSFIEnabled && offset < 256) {
+          const sfi = this.fidToSFI.get(this.selectedFID);
+          if (sfi == null) {
+            throw new Error(`Unknown FID ${this.selectedFID.toString(16)}`);
+          }
+          bytes = await this.sendReadBinary(0x80 | sfi & 0xff, fragment.getOffset(), fragment.getLength(), false);
+          this.isSelected = true;
+        } else {
+          if (!this.isSelected) {
+            await this.sendSelectFile(this.selectedFID);
+            this.isSelected = true;
+          }
+          bytes = await this.sendReadBinaryNoSFI(fragment.getOffset(), fragment.getLength(), offset > 32767);
+        }
+        if (bytes == null) {
+          throw new Error('Could not read bytes');
+        }
+        if (bytes.length > 0) {
+          fileInfo.addFragment(fragment.getOffset(), Uint8Array.from(bytes));
+        }
+        if (bytes.length < fragment.getLength()) {
+          responseLength = bytes.length;
+        }
+      }
+      const buffer = fileInfo.getBuffer();
+      const result = buffer.slice(offset, offset + responseLength);
+      return result;
+    } catch (error) {
+      const sw = error.getSW();
+      if ((sw & ISO7816_SW.WRONG_LENGTH) === ISO7816_SW.WRONG_LENGTH && this.maxReadBinaryLength > EIDService.DEFAULT_MAX_BLOCKSIZE) {
+        this.wrapper = this.oldWrapper;
+        this.maxReadBinaryLength = EIDService.DEFAULT_MAX_BLOCKSIZE;
+        return new Uint8Array(0);
+      }
+      throw new Error(`Read binary failed on file ${fileInfo == null ? this.selectedFID.toString(16) : fileInfo}`);
+    }
+  }
+  async getFileInfo() {
+    if (this.selectedFID <= 0) {
+      throw new Error('No file selected');
+    }
+    let fileInfo = this.fileInfos.get(this.selectedFID);
+    if (fileInfo != null) {
+      return fileInfo;
+    }
+    let prefix = null;
+    if (this.isSFIEnabled) {
+      const sfi = this.fidToSFI.get(this.selectedFID);
+      if (sfi == null) {
+        throw new Error(`Unknown FID ${this.selectedFID.toString(16)}`);
+      }
+      prefix = await this.sendReadBinary(0x80 | sfi & 0xff, 0, DefaultFileSystem.READ_AHEAD_LENGTH, false);
+      this.isSelected = true;
+    } else {
+      if (!this.isSelected) {
+        await this.sendSelectFile(this.selectedFID);
+        this.isSelected = true;
+      }
+      prefix = await this.sendReadBinaryNoSFI(0, DefaultFileSystem.READ_AHEAD_LENGTH, false);
+    }
+    if (prefix == null || prefix.length === 0) {
+      console.debug(`Something is wrong with prefix, prefix = ${prefix ? Buffer.from(prefix).toString('hex') : ''}`);
+      return null;
+    }
+    const fileLength = await this.getFileLength(this.selectedFID, DefaultFileSystem.READ_AHEAD_LENGTH, prefix);
+    if (fileLength < prefix.length) {
+      /* We got more than the file's length. Ignore trailing bytes. */
+      prefix = prefix.slice(0, fileLength);
+    }
+    fileInfo = new DefaultFileInfo(this.selectedFID, fileLength);
+    fileInfo.addFragment(0, Uint8Array.from(prefix));
+    this.fileInfos.set(this.selectedFID, fileInfo);
+    return fileInfo;
+  }
+  async sendSelectFile(fid) {
+    await this.service.sendSelectFile(this.wrapper, fid);
+  }
+  sendReadBinaryNoSFI(offset, le, isTLVEncodedOffsetNeeded) {
+    this.oldWrapper = this.wrapper instanceof SecureMessagingWrapper ? new TripleDesSecureMessagingWrapper(this.wrapper.getEncryptionKey(), this.wrapper.getMACKey(), this.wrapper.getMaxTransceiveLength(), this.wrapper.getShouldCheckMAC(), this.wrapper.getSendSequenceCounter()) : this.wrapper;
+    return this.service.sendReadBinary(this.wrapper, DefaultFileSystem.NO_SFI, offset, le, false, isTLVEncodedOffsetNeeded);
+  }
+  sendReadBinary(sfi, offset, le, isTLVEncodedOffsetNeeded) {
+    return this.service.sendReadBinary(this.wrapper, sfi, offset, le, true, isTLVEncodedOffsetNeeded);
+  }
+  async getFileLength(fid, le, prefix) {
+    if (prefix.length < le) {
+      return prefix.length;
+    }
+    const byteArrayInputStream = new ByteArrayInputStream(Buffer.from(prefix));
+    const tlvInputStream = new TLVInputStream(byteArrayInputStream);
+    try {
+      const tag = await tlvInputStream.readTag();
+      if (tag === CVCAFile.CAR_TAG) {
+        return CVCAFile.LENGTH;
+      }
+      const valueLength = await tlvInputStream.readLength();
+      const tlLength = prefix.length - byteArrayInputStream.available();
+      const fileLength = tlLength + valueLength;
+      return fileLength;
+    } finally {
+      try {
+        tlvInputStream.close();
+      } catch (ioe) {
+        console.debug('Error closing stream', ioe);
+      }
+    }
+  }
+}

package/lib/module/Shared/EIDReader/eidReader.js

@@ -0,0 +1,90 @@
+"use strict";
+
+import { BACKey } from "./bacKey.js";
+import { NFCManagerCardService } from "./nfcManagerCardService.js";
+import { EIDService } from "./eidService.js";
+import { DG1File } from "./lds/icao/dg1File.js";
+import { DG2File } from "./lds/icao/dg2File.js";
+import { Buffer } from 'buffer';
+import { InputStream } from "./java/inputStream.js";
+const eidReader = async (documentNumber, dateOfBirth, dateOfExpiry, progressCallback) => {
+  let progress = 0;
+  const nfcManagerCardService = new NFCManagerCardService();
+  const passportService = new EIDService(nfcManagerCardService, EIDService.NORMAL_MAX_TRANSCEIVE_LENGTH, EIDService.DEFAULT_MAX_BLOCKSIZE, false, true);
+  try {
+    await passportService.open();
+
+    // Select Applet for MRTD
+    await passportService.sendSelectApplet(false);
+    progress = 10;
+    if (progressCallback) {
+      progressCallback(progress);
+    }
+
+    // Check if EF_COM is available
+    try {
+      const efComStream = passportService.getInputStream(EIDService.EF_COM);
+      await efComStream.init();
+      await efComStream.read();
+    } catch (error) {
+      // EF_COM not available -> try to do BAC
+      const bacKey = new BACKey(documentNumber, dateOfBirth, dateOfExpiry);
+      await passportService.doBAC(bacKey);
+    }
+    progress = 20;
+    if (progressCallback) {
+      progressCallback(progress);
+    }
+
+    // Read DG1 (MRZ Info)
+    const dg1InputStream = passportService.getInputStream(EIDService.EF_DG1);
+    await dg1InputStream.init();
+    const dg1File = new DG1File(undefined, dg1InputStream);
+    const mrzInfo = await dg1File.getMRZInfo();
+    progress = 30;
+    if (progressCallback) {
+      progressCallback(progress);
+    }
+
+    // Read DG2 (Face Image)
+    const dg2InputStream = passportService.getInputStream(EIDService.EF_DG2);
+    await dg2InputStream.init();
+    InputStream.onRead((totalBytesRead, fileLength) => {
+      progress = 30 + totalBytesRead / fileLength * 70;
+      if (progressCallback) {
+        progressCallback(progress);
+      }
+    });
+    const dg2File = new DG2File([], dg2InputStream);
+    let imageAsBase64 = '';
+    let mimeType = '';
+    const allFaceImageInfos = [];
+    const faceInfos = await dg2File.getFaceInfos();
+    for (let faceInfo of faceInfos) {
+      allFaceImageInfos.push(...faceInfo.getFaceImageInfos());
+    }
+    if (allFaceImageInfos?.length > 0) {
+      const faceImageInfo = allFaceImageInfos[0];
+      const imageLength = faceImageInfo.getImageLength();
+      const imageInputStream = await faceImageInfo.getImageInputStream();
+      const buffer = Buffer.alloc(imageLength);
+      await imageInputStream.readBytesWithOffset(buffer, 0, imageLength);
+      imageAsBase64 = buffer.toString('base64');
+      mimeType = faceImageInfo.getMimeType();
+    }
+    progress = 100;
+    if (progressCallback) {
+      progressCallback(progress);
+    }
+    return {
+      mrz: mrzInfo,
+      faceImage: imageAsBase64,
+      mimeType: mimeType
+    };
+  } catch (error) {
+    console.debug('Error reading passport data', error);
+  } finally {
+    await passportService.close();
+  }
+};
+export { eidReader };

package/lib/module/Shared/EIDReader/eidService.js

@@ -0,0 +1,280 @@
+"use strict";
+
+import { AbstractMRTDCardService } from "./abstractMRTDCardService.js";
+import { CardFileInputStream } from "./cardFileInputStream.js";
+import { DefaultFileSystem } from "./defaultFileSystem.js";
+import { BACAPDUSender } from "./protocol/bacAPDUSender.js";
+import { ReadBinaryAPDUSender } from "./protocol/readBinaryAPDUSender.js";
+import { BACProtocol } from "./protocol/bacProtocol.js";
+export class EIDService extends AbstractMRTDCardService {
+  /** Shared secret type for non-PACE key. */
+  static NO_PACE_KEY_REFERENCE = 0x00;
+
+  /** Shared secret type for PACE according to BSI TR-03110 v2.03 B.11.1. */
+  static MRZ_PACE_KEY_REFERENCE = 0x01;
+
+  /** Shared secret type for PACE according to BSI TR-03110 v2.03 B.11.1. */
+  static CAN_PACE_KEY_REFERENCE = 0x02;
+
+  /** Shared secret type for PACE according to BSI TR-03110 v2.03 B.11.1. */
+  static PIN_PACE_KEY_REFERENCE = 0x03;
+
+  /** Shared secret type for PACE according to BSI TR-03110 v2.03 B.11.1. */
+  static PUK_PACE_KEY_REFERENCE = 0x04;
+
+  /** Card Access. */
+  static EF_CARD_ACCESS = 0x011c;
+
+  /** Card Security. */
+  static EF_CARD_SECURITY = 0x011d;
+
+  /** File identifier for data group 1. Data group 1 contains the MRZ. */
+  static EF_DG1 = 0x0101;
+
+  /** File identifier for data group 2. Data group 2 contains face image data. */
+  static EF_DG2 = 0x0102;
+
+  /** File identifier for data group 3. Data group 3 contains finger print data. */
+  static EF_DG3 = 0x0103;
+
+  /** File identifier for data group 4. Data group 4 contains iris data. */
+  static EF_DG4 = 0x0104;
+
+  /** File identifier for data group 5. Data group 5 contains displayed portrait. */
+  static EF_DG5 = 0x0105;
+
+  /** File identifier for data group 6. Data group 6 is RFU. */
+  static EF_DG6 = 0x0106;
+
+  /** File identifier for data group 7. Data group 7 contains displayed signature. */
+  static EF_DG7 = 0x0107;
+
+  /** File identifier for data group 8. Data group 8 contains data features. */
+  static EF_DG8 = 0x0108;
+
+  /** File identifier for data group 9. Data group 9 contains structure features. */
+  static EF_DG9 = 0x0109;
+
+  /** File identifier for data group 10. Data group 10 contains substance features. */
+  static EF_DG10 = 0x010a;
+
+  /** File identifier for data group 11. Data group 11 contains additional personal details. */
+  static EF_DG11 = 0x010b;
+
+  /** File identifier for data group 12. Data group 12 contains additional document details. */
+  static EF_DG12 = 0x010c;
+
+  /** File identifier for data group 13. Data group 13 contains optional details. */
+  static EF_DG13 = 0x010d;
+
+  /** File identifier for data group 14. Data group 14 contains security infos. */
+  static EF_DG14 = 0x010e;
+
+  /** File identifier for data group 15. Data group 15 contains the public key used for Active Authentication. */
+  static EF_DG15 = 0x010f;
+
+  /** File identifier for data group 16. Data group 16 contains person(s) to notify. */
+  static EF_DG16 = 0x0110;
+
+  /** The security document. */
+  static EF_SOD = 0x011d;
+
+  /** The data group presence list. */
+  static EF_COM = 0x011e;
+
+  /**
+   * Contains EAC CVA references. Note: this can be overridden by a file
+   * identifier in the DG14 file (in a TerminalAuthenticationInfo). Check DG14
+   * first. Also, this file does not have a header tag, like the others.
+   */
+  static EF_CVCA = 0x011c;
+
+  /** Short file identifier for card access file. */
+  static SFI_CARD_ACCESS = 0x1c;
+
+  /** Short file identifier for card security file. */
+  static SFI_CARD_SECURITY = 0x1d;
+
+  /** Short file identifier for file. */
+  static SFI_DG1 = 0x01;
+
+  /** Short file identifier for file. */
+  static SFI_DG2 = 0x02;
+
+  /** Short file identifier for file. */
+  static SFI_DG3 = 0x03;
+
+  /** Short file identifier for file. */
+  static SFI_DG4 = 0x04;
+
+  /** Short file identifier for file. */
+  static SFI_DG5 = 0x05;
+
+  /** Short file identifier for file. */
+  static SFI_DG6 = 0x06;
+
+  /** Short file identifier for file. */
+  static SFI_DG7 = 0x07;
+
+  /** Short file identifier for file. */
+  static SFI_DG8 = 0x08;
+
+  /** Short file identifier for file. */
+  static SFI_DG9 = 0x09;
+
+  /** Short file identifier for file. */
+  static SFI_DG10 = 0x0a;
+
+  /** Short file identifier for file. */
+  static SFI_DG11 = 0x0b;
+
+  /** Short file identifier for file. */
+  static SFI_DG12 = 0x0c;
+
+  /** Short file identifier for file. */
+  static SFI_DG13 = 0x0d;
+
+  /** Short file identifier for file. */
+  static SFI_DG14 = 0x0e;
+
+  /** Short file identifier for file. */
+  static SFI_DG15 = 0x0f;
+
+  /** Short file identifier for file. */
+  static SFI_DG16 = 0x10;
+
+  /** Short file identifier for file. */
+  static SFI_COM = 0x1e;
+
+  /** Short file identifier for file. */
+  static SFI_SOD = 0x1d;
+
+  /** Short file identifier for file. */
+  static SFI_CVCA = 0x1c;
+
+  /** The default maximal blocksize used for unencrypted APDUs. */
+  static DEFAULT_MAX_BLOCKSIZE = 223;
+
+  /** The normal maximal transceive length of APDUs. */
+  static NORMAL_MAX_TRANSCEIVE_LENGTH = 256;
+
+  /** The extended maximal transceive length of APDUs. */
+  static EXTENDED_MAX_TRANSCEIVE_LENGTH = 65536;
+
+  /** The applet we select when we start a session. */
+  static APPLET_AID = Uint8Array.from([0xa0, 0x00, 0x00, 0x02, 0x47, 0x10, 0x01]);
+  wrapper = null;
+  constructor(service, maxTransceiveLengthForSecureMessaging = EIDService.NORMAL_MAX_TRANSCEIVE_LENGTH, maxBlockSize = EIDService.DEFAULT_MAX_BLOCKSIZE, isSFIEnabled = false, shouldCheckMAC = false) {
+    super();
+    this.service = service;
+    this.bacSender = new BACAPDUSender(service);
+    this.readBinarySender = new ReadBinaryAPDUSender(service);
+    this.maxTransceiveLengthForSecureMessaging = maxTransceiveLengthForSecureMessaging;
+    this.maxBlockSize = maxBlockSize;
+    this.shouldCheckMAC = shouldCheckMAC;
+    this.isAppletSelected = false;
+    this.isOpen = false;
+    this.rootFileSystem = new DefaultFileSystem(this.readBinarySender, false);
+    this.appletFileSystem = new DefaultFileSystem(this.readBinarySender, isSFIEnabled);
+  }
+  async open() {
+    if (this.getIsOpen()) {
+      return;
+    }
+    await this.service.open();
+    this.isOpen = true;
+  }
+  async sendSelectApplet(hasPACESucceeded) {
+    if (this.isAppletSelected) {
+      console.debug('Re-selecting ICAO applet');
+    }
+    if (hasPACESucceeded) {
+      await this.readBinarySender.sendSelectApplet(this.wrapper, EIDService.APPLET_AID);
+    } else {
+      await this.readBinarySender.sendSelectApplet(null, EIDService.APPLET_AID);
+    }
+    this.isAppletSelected = true;
+  }
+  async sendSelectMF() {
+    await this.readBinarySender.sendSelectMF();
+    this.wrapper = null;
+  }
+  getIsOpen() {
+    return this.isOpen;
+  }
+  async doBAC(bacKey) {
+    const bacResult = await new BACProtocol(this.bacSender, this.maxTransceiveLengthForSecureMessaging, this.shouldCheckMAC).doBAC(bacKey);
+    this.wrapper = bacResult.getWrapper();
+    this.appletFileSystem.setWrapper(this.wrapper);
+    return bacResult;
+  }
+  async close() {
+    try {
+      await this.service.close();
+      this.wrapper = null;
+    } finally {
+      this.isOpen = false;
+    }
+  }
+  getMaxTransceiveLength() {
+    return this.maxTransceiveLengthForSecureMessaging;
+  }
+  getWrapper() {
+    if (this.wrapper == null) {
+      return null;
+    }
+    const ldsSecureMessagingWrapper = this.appletFileSystem.getWrapper();
+    if (ldsSecureMessagingWrapper != null && ldsSecureMessagingWrapper.getSendSequenceCounter() > this.wrapper.getSendSequenceCounter()) {
+      this.wrapper = ldsSecureMessagingWrapper;
+    }
+    return this.wrapper;
+  }
+  transmit(commandAPDU) {
+    return this.service.transmit(commandAPDU);
+  }
+  getATR() {
+    return this.service.getATR();
+  }
+  getIsConnectionLost(error) {
+    return this.service.getIsConnectionLost(error);
+  }
+  getShouldCheckMAC() {
+    return this.shouldCheckMAC;
+  }
+  getInputStream(fid) {
+    return this.getInputStreamWithMaxBlockSize(fid, this.maxBlockSize);
+  }
+  getInputStreamWithMaxBlockSize(fid, maxBlockSize) {
+    if (!this.isAppletSelected) {
+      this.rootFileSystem.selectFile(fid);
+      return new CardFileInputStream(maxBlockSize, this.rootFileSystem);
+    } else {
+      this.appletFileSystem.selectFile(fid);
+      return new CardFileInputStream(maxBlockSize, this.appletFileSystem);
+    }
+  }
+  getMaxReadBinaryLength() {
+    if (this.appletFileSystem == null) {
+      return EIDService.NORMAL_MAX_TRANSCEIVE_LENGTH;
+    }
+    return this.appletFileSystem.getMaxReadBinaryLength();
+  }
+  addAPDUListener(listener) {
+    this.service.addAPDUListener(listener);
+  }
+  removeAPDUListener(listener) {
+    this.service.removeAPDUListener(listener);
+  }
+  getAPDUListeners() {
+    return this.service.getAPDUListeners();
+  }
+  notifyExchangedAPDU(event) {
+    const apduListeners = this.getAPDUListeners();
+    if (apduListeners == null || apduListeners.size === 0) {
+      return;
+    }
+    for (const apduListener of apduListeners) {
+      apduListener.exchangedAPDU(event);
+    }
+  }
+}

package/lib/module/Shared/EIDReader/fileInfo.js

@@ -0,0 +1,3 @@
+"use strict";
+
+export class FileInfo {}

package/lib/module/Shared/EIDReader/fileSystemCardService.js

@@ -0,0 +1,4 @@
+"use strict";
+
+import { CardService } from "./cardService.js";
+export class FileSystemCardService extends CardService {}

package/lib/module/Shared/EIDReader/fragment.js

@@ -0,0 +1,17 @@
+"use strict";
+
+export class Fragment {
+  constructor(offset, length) {
+    this.offset = offset;
+    this.length = length;
+  }
+  static getInstance(offset, length) {
+    return new Fragment(offset, length);
+  }
+  getOffset() {
+    return this.offset;
+  }
+  getLength() {
+    return this.length;
+  }
+}