@vppos/react-native-nfc 1.0.0

package/vendor/ios-passport-reader/Examples/Example_SPM/NFCPassportReaderAppTests/PACETests.swift

@@ -0,0 +1,112 @@
+//
+//  PACETests.swift
+//  NFCPassportReaderAppTests
+//
+//  Created by Andy Qua on 09/03/2021.
+//  Copyright © 2021 Andy Qua. All rights reserved.
+//
+
+import Foundation
+import OpenSSL
+import NFCPassportReader
+
+// Currently not actual tests - maybe at some point but currently just a holding place for some testing stuff I didn't want to get rid of!
+// Hopefully will re-organise into proper tests!
+class PACETests {
+    func testDHKeyMapping() -> OpaquePointer {
+        var resp : [UInt8] = [0x7c, 0x82, 0x01, 0x04, 0x82, 0x82, 0x01, 0x00, 0x70, 0x5a, 0xce, 0x59, 0x1c, 0x0b, 0xe1, 0xa1, 0x19, 0x5b, 0x14, 0x1c, 0x97, 0x38, 0x51, 0xde, 0x07, 0xf1, 0x66, 0xa6, 0x74, 0x7d, 0x18, 0x9f, 0x5e, 0x3b, 0x51, 0x0d, 0xbf, 0xff, 0xe2, 0x16, 0xca, 0x96, 0x0e, 0x63, 0x8d, 0x16, 0x49, 0x5f, 0x53, 0x15, 0x60, 0x9b, 0xd6, 0x6e, 0x41, 0x52, 0x69, 0x08, 0x6a, 0x37, 0x6f, 0xf4, 0xd6, 0x14, 0xcc, 0x9b, 0x9d, 0x57, 0x0e, 0x64, 0x53, 0x49, 0xa3, 0xe6, 0xd6, 0xdb, 0x80, 0xfb, 0x08, 0x39, 0xb7, 0x66, 0xdc, 0xcc, 0xb1, 0xda, 0xe0, 0xe5, 0x21, 0xaf, 0xca, 0x9b, 0xdc, 0xe2, 0xc2, 0xd9, 0xb2, 0x58, 0xd8, 0x22, 0x94, 0x23, 0x76, 0x0f, 0x40, 0x74, 0xea, 0x73, 0xf1, 0xa4, 0x4d, 0xdd, 0xfc, 0x72, 0x27, 0xda, 0x8b, 0xce, 0x03, 0x75, 0x98, 0xfe, 0x38, 0x81, 0x1d, 0x45, 0xc9, 0xd6, 0x8b, 0x81, 0x8d, 0xef, 0xdc, 0xda, 0x5f, 0xc8, 0x1a, 0x12, 0x51, 0x0d, 0xfa, 0x02, 0x67, 0xf9, 0x89, 0x5e, 0x6d, 0xb8, 0x55, 0x43, 0xb0, 0x71, 0x47, 0x0d, 0xf0, 0x27, 0xda, 0x62, 0x3b, 0xd4, 0xa9, 0x4d, 0x5e, 0xde, 0xba, 0x81, 0x7b, 0xde, 0x79, 0x5f, 0x57, 0xbf, 0x0b, 0x35, 0xf4, 0x29, 0x6f, 0x5a, 0xd4, 0xe8, 0xd9, 0xfd, 0x2c, 0x87, 0x2e, 0x84, 0x26, 0x10, 0x9d, 0x1b, 0x50, 0xe4, 0x1d, 0xb3, 0x91, 0x02, 0xac, 0xa4, 0x58, 0x52, 0x61, 0x77, 0x1f, 0x97, 0x02, 0xd6, 0x48, 0x90, 0x1f, 0x69, 0xb6, 0xa0, 0x53, 0x53, 0xf9, 0xcb, 0x57, 0x01, 0xfe, 0x9f, 0xf2, 0xa1, 0x29, 0x60, 0x3f, 0xa5, 0xa4, 0xf6, 0x3d, 0xf1, 0xc6, 0x7a, 0xf3, 0xc6, 0xfd, 0x11, 0x6c, 0x38, 0xe8, 0x91, 0x82, 0x3c, 0xd9, 0x33, 0xef, 0x57, 0x9e, 0x6c, 0x04, 0x10, 0x65, 0x6a, 0xc5, 0xaa, 0x1f, 0xc4, 0x50, 0x1d, 0xe6, 0xbd, 0x27, 0xe0, 0x79, 0x30, ]
+        
+        let mappingKey : OpaquePointer = EVP_PKEY_new()
+        let dhKey = DH_get_2048_256()
+        
+        let rc = DH_generate_key(dhKey)
+        EVP_PKEY_set1_DH(mappingKey, dhKey)
+        
+        let pubKeyData = try! unwrapDO( tag:0x7c, wrappedData:resp)
+        let encodedPublicKey = try! unwrapDO(tag: 0x82, wrappedData: pubKeyData)
+        
+        let piccMappingPublicKey = OpenSSLUtils.decodePublicKeyFromBytes(pubKeyData: encodedPublicKey, params: mappingKey)!
+        let asecret = OpenSSLUtils.computeSharedSecret(privateKeyPair: mappingKey, publicKey: piccMappingPublicKey)
+        
+        
+        let dh_mapping_key = EVP_PKEY_get1_DH(mappingKey)
+        
+        
+        print( "DONE" )
+        
+        let piccNonce : [UInt8] = [0xed, 0xb6, 0xc4, 0x07, 0x04, 0xae, 0x98, 0xfd,]
+        let bn_nonce = BN_bin2bn(piccNonce, Int32(piccNonce.count), nil);
+        
+        let bn = BN_bin2bn(encodedPublicKey, Int32(encodedPublicKey.count), nil);
+        var secret = [UInt8](repeating: 0, count: Int(DH_size(dh_mapping_key)))
+        DH_compute_key( &secret, bn, dh_mapping_key)
+        
+        
+        let bn_h = BN_bin2bn(secret, Int32(secret.count), nil);
+        
+        var p : OpaquePointer? = nil
+        var q : OpaquePointer? = nil
+        var g : OpaquePointer? = nil
+        DH_get0_pqg(dh_mapping_key, &p, &q, &g);
+        
+        // map to new generator#imageLiteral(resourceName: "simulator_screenshot_33B42CB4-EA6E-47B4-A2A2-D96CA95B0F15.png")
+        let bn_g = BN_new()
+        let new_g = BN_new()
+        
+        // bn_g = g^nonce mod p
+        // ephemeral_key->g = bn_g mod p * h  => (g^nonce mod p) * h mod p
+        let bn_ctx = BN_CTX_new()
+        let rc3 = BN_mod_exp(bn_g, g, bn_nonce, p, bn_ctx)
+        let rc4 = BN_mod_mul(new_g, bn_g, bn_h, p, bn_ctx)
+        
+        
+        let ephemeral_key = DHparams_dup(dh_mapping_key)
+        let rc5 = DH_set0_pqg(ephemeral_key, BN_dup(p), BN_dup(q), BN_dup(new_g))
+        
+        BN_free( bn_nonce )
+        BN_free( bn )
+        BN_free(bn_h)
+        BN_free(bn_g)
+        BN_free(new_g)
+        BN_CTX_free(bn_ctx)
+        
+        // Set the ephemeral params
+        let ephemeralParams = EVP_PKEY_new()
+        let rc6 = EVP_PKEY_set1_DH(ephemeralParams, ephemeral_key)
+        
+        EVP_PKEY_free(mappingKey)
+        
+        var ephemeralKeyPair : OpaquePointer? = nil
+        let pctx = EVP_PKEY_CTX_new(ephemeralParams, nil)
+        EVP_PKEY_keygen_init(pctx)
+        EVP_PKEY_keygen(pctx, &ephemeralKeyPair)
+        EVP_PKEY_CTX_free(pctx)
+        
+        EVP_PKEY_free( ephemeralParams )
+        
+        let publicKey = OpenSSLUtils.getPublicKeyData( from: ephemeralKeyPair! )
+        print( "Ephemeral public key - \(binToHexRep(publicKey!, asArray: true))")
+        
+        return ephemeralKeyPair!
+    }
+    
+    func doTest() {
+        var passportEphKey : [UInt8] = [0x01, 0xd5, 0xa8, 0xb2, 0xea, 0xb6, 0x18, 0x55, 0x34, 0x24, 0xfe, 0x25, 0x10, 0x15, 0xaf, 0xc3, 0x85, 0xda, 0x13, 0x94, 0xe7, 0x2b, 0x76, 0x81, 0x2d, 0x8c, 0xe0, 0x6f, 0x60, 0x65, 0xfb, 0x33, 0x8c, 0x5b, 0x2d, 0xc9, 0x38, 0x11, 0xb3, 0x80, 0xd7, 0x49, 0xaa, 0xeb, 0x36, 0xa5, 0xdd, 0xa0, 0x78, 0x33, 0xe0, 0xd5, 0x52, 0xd4, 0x4e, 0xaa, 0xf0, 0xa3, 0x5f, 0xd3, 0x9c, 0x89, 0x44, 0xca, 0xac, 0xf1, 0x7a, 0x1e, 0xd4, 0x61, 0x58, 0x1d, 0x81, 0x83, 0xb6, 0x98, 0x85, 0x15, 0x2d, 0xeb, 0xd7, 0xc2, 0x66, 0xe4, 0xe0, 0xd1, 0x73, 0x1c, 0x52, 0xd7, 0x3a, 0x33, 0x20, 0x1f, 0x64, 0x8b, 0x85, 0xb7, 0xe5, 0xbb, 0x09, 0xe8, 0x8a, 0xd3, 0x79, 0x8c, 0x23, 0x7a, 0x35, 0xb2, 0xc5, 0xfa, 0x42, 0xcb, 0xe4, 0xc4, 0x86, 0xa7, 0x8f, 0x96, 0x22, 0xc1, 0x2b, 0x07, 0xc6, 0x29, 0xa2, 0xfd, 0x31, 0xcb, 0xba, 0x1b, 0x05, 0xca, 0xc2, 0xaa, 0xc3, 0x6f, 0x5a, 0xa8, 0x43, 0xa1, 0x60, 0x35, 0x97, 0xda, 0x35, 0xfd, 0x76, 0x16, 0xa9, 0x32, 0x91, 0xd1, 0xd8, 0x7b, 0x0b, 0xfc, 0x30, 0x99, 0x06, 0xa7, 0x62, 0x44, 0x85, 0x2b, 0xb9, 0x9b, 0x5a, 0xfb, 0x94, 0x28, 0x47, 0x40, 0x7f, 0x7a, 0x6a, 0xb2, 0xe9, 0xcc, 0xe3, 0x13, 0x52, 0x7c, 0xc0, 0x87, 0x1d, 0x72, 0xc5, 0x4b, 0x69, 0x0a, 0x2a, 0xc7, 0x37, 0xd5, 0x17, 0xd2, 0xce, 0xd2, 0x54, 0x66, 0x92, 0x42, 0x91, 0x84, 0x24, 0xef, 0xb6, 0x98, 0x6d, 0x78, 0x95, 0x0d, 0x7e, 0x49, 0xd0, 0xee, 0xcc, 0x61, 0x5d, 0x2f, 0x5a, 0xa1, 0xb2, 0xc0, 0xa9, 0xe7, 0x30, 0x94, 0x58, 0x58, 0x7a, 0x59, 0xd7, 0x96, 0xe9, 0x8c, 0x2c, 0xfd, 0xe9, 0x58, 0xe4, 0x4b, 0xa3, 0x31, 0x47, 0x03, 0x57, 0x05, 0x84, 0x6d, 0x3c, 0x4c, 0x3a, 0xaa, ];
+        
+        let ephKeyPair = testDHKeyMapping()
+        
+        let passportPublicKey = OpenSSLUtils.decodePublicKeyFromBytes(pubKeyData: passportEphKey, params: ephKeyPair)
+        
+        let dh = EVP_PKEY_get1_DH(ephKeyPair);
+        
+        var out = [UInt8](repeating:0, count:Int(DH_size(dh)))
+        
+        let dh_ppub = EVP_PKEY_get1_DH(passportPublicKey)
+        var bn = BN_new()
+        DH_get0_key( dh_ppub, &bn, nil )
+        
+        let len = DH_compute_key(&out, bn, dh);
+        
+        return
+    }
+}

package/vendor/ios-passport-reader/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2019 Andy Qua
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/vendor/ios-passport-reader/NFCPassportReader.podspec

@@ -0,0 +1,27 @@
+Pod::Spec.new do |spec|
+
+  spec.name         = "NFCPassportReader"
+  spec.version      = "2.1.1"
+  spec.summary      = "This package handles reading an NFC Enabled passport using iOS 13 CoreNFC APIS"
+
+  spec.homepage     = "https://github.com/AndyQ/NFCPassportReader"
+  spec.license      = "MIT"
+  spec.author       = { "Andy Qua" => "andy.qua@gmail.com" }
+  spec.platform = :ios
+  spec.ios.deployment_target = "14.0"
+
+  spec.source       = { :git => "https://github.com/AndyQ/NFCPassportReader.git", :tag => "#{spec.version}" }
+
+  spec.source_files  = "Sources/**/*.{swift}"
+
+  spec.swift_version = "5.0"
+
+  spec.dependency "OpenSSL-Universal", '1.1.1900'
+  spec.xcconfig          = { 'OTHER_LDFLAGS' => '-weak_framework CryptoKit -weak_framework CoreNFC -weak_framework CryptoTokenKit' }
+
+  spec.pod_target_xcconfig = {
+    'EXCLUDED_ARCHS[sdk=iphonesimulator*]' => 'arm64'
+  }
+  spec.user_target_xcconfig = { 'EXCLUDED_ARCHS[sdk=iphonesimulator*]' => 'arm64' }
+
+end

package/vendor/ios-passport-reader/Package.swift

@@ -0,0 +1,29 @@
+// swift-tools-version:5.4
+// The swift-tools-version declares the minimum version of Swift required to build this package.
+
+import PackageDescription
+
+let package = Package(
+    name: "NFCPassportReader",
+    platforms: [.iOS("15.0")],
+    products: [
+        // Products define the executables and libraries produced by a package, and make them visible to other packages.
+        .library(
+            name: "NFCPassportReader",
+            targets: ["NFCPassportReader"]),
+    ],
+    dependencies: [
+        // Dependencies declare other packages that this package depends on.
+        // .package(url: /* package url */, from: "1.0.0"),
+        .package(url: "https://github.com/krzyzanowskim/OpenSSL.git", .upToNextMinor(from: "1.1.2300"))
+
+    ],
+    targets: [
+        // Targets are the basic building blocks of a package. A target can define a module or a test suite.
+        // Targets can depend on other targets in this package, and on products in packages which this package depends on.
+        .target(
+            name: "NFCPassportReader",
+            dependencies: ["OpenSSL"]),
+    ]
+)
+

package/vendor/ios-passport-reader/README.md

@@ -0,0 +1,141 @@
+# NFCPassportReader
+
+This package handles reading an NFC Enabled passport using iOS 13 CoreNFC APIS
+
+**Version 2 (and the main branch) now uses Swift Async/Await for communication.  If you need an earlier version, please use 1.1.9 or below!**
+
+Supported features:
+* Basic Access Control (BAC)
+* Secure Messaging
+* Reads DG1 (MRZ data) and DG2 (Image) in both JPEG and JPEG2000 formats, DG7, DG11, DG12, DG14 and DG15 (also SOD and COM datagroups)
+* Passive Authentication
+* Active Authentication
+* Chip Authentication (ECDH DES and AES keys tested, DH DES AES keys implemented ad should work but currently not tested)
+* PACE - currently only Generic Mapping (GM) supported
+* Ability to dump passport stream and read it back in
+* Uses Async/Await
+
+This is still very early days - the code is by no means perfect and there are still some rough edges  - there ARE most definitely bugs and I'm sure I'm not doing things perfectly. 
+
+It reads and verifies my passport (and others I've been able to test) fine, however your mileage may vary.
+
+## Installation
+### Swift Package Manager (recommended)
+
+NFCPassportReader may be installed via Swift Package Manager, by pointing to this repo's URL.
+
+
+### CocoaPods (deprecated and unsupported)
+
+Install using [CocoaPods](http://cocoapods.org) by adding this line to your Podfile:
+
+```ruby
+use_frameworks!
+pod 'NFCPassportReader', git:'https://github.com/AndyQ/NFCPassportReader.git'  
+```
+
+Then, run the following command:
+
+```bash
+$ pod install
+```
+
+Note - ** Don't use Bitcode ** - its not supported by this and has been deprecated by Apple
+
+## Usage 
+To use, you first need to create the Passport MRZ Key which consists of the passport number, date of birth and expiry date (including the checksums).
+Dates are in YYMMDD format
+
+For example:
+
+```
+<passport number><passport number checksum><date of birth><date of birth checksum><expiry date><expiry date checksum>
+
+e.g. for Passport nr 12345678, Date of birth 27-Jan-1998, Expiry 30-Aug-2025 the MRZ Key would be:
+
+Passport number - 12345678
+Passport number checksum - 8
+Date Of birth - 980127
+Date of birth checksum - 7
+Expiry date - 250831
+Expiry date checksum - 5
+
+mrzKey = "12345678898012772508315"
+```
+
+Then on an instance of PassportReader, call the readPassport method passing in the mrzKey, the datagroups to read and a completion block.  
+e.g.
+
+```
+passportReader.readPassport(mrzKey: mrzKey, tags: [.COM, .DG1, .DG2], completed: { (error) in
+   ...
+}
+```
+
+Currently the datagroups supported are: COM, DG1, DG2, DG7, DG11, DG12, DG14 (partial), DG15, and SOD
+
+This will then handle the reading of the passport, and image and will call the completion block either with an TagError error if there was an error of some kind, or nil if successful.
+
+If successful, the passportReader object will then contain valid data for the passportMRZ and passportImage fields.
+Note - JPEG2000 images are currently unsupported - access to the raw data is available if you need to implement support for those.
+
+In addition, you can customise the messages displayed in the NFC Session Reader by providing a customDisplayMessage callback
+e.g. to override just the initial request to present passport message:
+
+```
+passportReader.readPassport(mrzKey: mrzKey, tags: [.COM, .DG1, .DG2],
+    customDisplayMessage: { (displayMessage) in
+        switch displayMessage {
+            case .requestPresentPassport:
+                return "Hold your iPhone near an NFC enabled passport."
+            default: 
+                return nil
+    }, completed: { (error) in
+        ...
+}
+```
+
+
+## Logging
+Additional logging (very verbose)  can be enabled on the PassportReader by passing in a log level on creation:
+e.g.
+
+```
+let reader = PassportReader(logLevel: .debug)
+```
+
+NOTE - currently this is just printing out to the console - I'd like to implement better logging later - probably using SwiftyBeaver 
+
+### PassiveAuthentication
+Passive Authentication is now part of the main library and can be used to ensure that an E-Passport is valid and hasn't been tampered with.
+
+It requires a set of CSCA certificates in PEM format from a master list (either from a country that publishes their master list, or the ICAO PKD repository). See the scripts folder for details on how to get and create this file.
+
+**The masterList.pem file included in the Sample app is purely there to ensure no compiler warnings and contains only a single PEM file that was self-generated and won't be able to verify anything!**
+
+## Sample app
+There is a sample app included in the repo which demonstrates the functionality.
+
+
+## Troubleshooting
+* If when doing the initial Mutual Authenticate challenge, you get an error with and SW1 code 0x63, SW2 code 0x00, reason: No information given, then this is usualy because your MRZ key is incorrect, and possibly because your passport number is not quite right.  If your passport number in the MRZ contains a '<' then you need to include this in the MRZKey - the checksum should work out correct too.  For more details, check out App-D2 in the ICAO 9303 Part 11 document (https://www.icao.int/publications/Documents/9303_p11_cons_en.pdf)
+<br><br>e.g. if the bottom line on the MRZ looks like:
+12345678<8AUT7005233M2507237<<<<<<<<<<<<<<06
+<br><br>
+In this case the passport number is 12345678 but is padded out with an additonal <. This needs to be included in the MRZ key used for BAC.
+e.g. 12345678<870052332507237 would be the key used.
+
+
+
+## To do
+There are a number of things I'd like to implement in no particular order:
+ * Finish off PACE authentication (IM and CAM)
+ 
+
+## Thanks
+I'd like to thank the writers of pypassport (Jean-Francois Houzard and Olivier Roger - can't find their website but referenced from https://github.com/andrew867/epassportviewer) who's work this is based on.
+
+The EPassport section on YobiWiki (http://wiki.yobi.be/wiki/EPassport)  This has been an invaluable resource especially around Passive Authentication.
+
+Marcin Krzyżanowski for his OpenSSL-Universal repo.
+