n20-common-lib 2.8.13 → 2.8.15

package/src/plugins/Sign/Itrus/index.js

@@ -1,226 +1,412 @@
-function Certificate(r) {
-  var t = {}
-  if (
-    ((t.certInfo = null),
-    (t._parseCert = function (r) {
-      var t = TCACore.getInstance(),
-        e = { certStoreNameArr: ['MY', 'Address'], b64Cert: r }
-      e = tcu.json2Str(e)
-      var n
+function Certificate(b64CertOrCertInfo) {
+  var priData = {
+    certInfo: null,
+    _parseCert: function (r) {
+      if (tcu.isFFKyLinFT()) {
+        return tcu.ffKylinFT.parseCert(r)
+      }
+      var t,
+        e = TCACore.getInstance(),
+        n = { certStoreNameArr: ['MY', 'Address'], b64Cert: r }
+      n = tcu.json2Str(n)
       try {
-        n = t.call('Certificate/parseCert', e)
+        t = e.call('Certificate/parseCert', n)
       } catch (r) {
         return TCACErr.throwErr(r, ERRMAP.CERTIFICATE_PARSE_ERROR), null
       }
-      return n.certInfo
-    }),
-    (this._keyStoreName = ''),
+      return t.certInfo
+    }
+  }
+  if (
+    ((this._keyStoreName = ''),
     (this._keyStoreType = ''),
     (this._keyStoreContainer = ''),
     (this._keySpec = 0),
     (this._certStoreName = ''),
-    tcu.isStr(r))
-  )
-    (t.certInfo = t._parseCert(r)), (t.certInfo.b64 = r)
-  else {
-    if (!tcu.isObj(r)) return void TCACErr.throwErr(ERRMAP.CERTIFICATE_INIT_WRONGTYPE)
-    t.certInfo = r
+    tcu.isStr(b64CertOrCertInfo))
+  ) {
+    ;(priData.certInfo = priData._parseCert(b64CertOrCertInfo)), (priData.certInfo.b64 = b64CertOrCertInfo)
+  } else {
+    if (!tcu.isObj(b64CertOrCertInfo)) {
+      return void TCACErr.throwErr(ERRMAP.CERTIFICATE_INIT_WRONGTYPE)
+    }
+    priData.certInfo = b64CertOrCertInfo
   }
-  ;(this._keyStoreName = t.certInfo.keyStoreName),
-    (this._keyStoreType = t.certInfo.keyStoreType),
-    (this._keyStoreContainer = t.certInfo.certContainerName),
-    (this._keySpec = t.certInfo.certKeySpec),
-    (this._certStoreName = t.certInfo.certStoreName),
+  ;(this._keyStoreName = priData.certInfo.keyStoreName),
+    (this._keyStoreType = priData.certInfo.keyStoreType),
+    (this._keyStoreContainer = priData.certInfo.certContainerName),
+    (this._keySpec = priData.certInfo.certKeySpec),
+    (this._certStoreName = priData.certInfo.certStoreName),
     (this.serialNumber = function () {
-      return t.certInfo.SN
+      return priData.certInfo.SN
+    }),
+    (this.serialNumberDec = function () {
+      return priData.certInfo.SNDEC
     }),
     (this.subject = function () {
-      return t.certInfo.subject.reDn
+      return priData.certInfo.subject.winDn
     }),
     (this.issuer = function () {
-      return t.certInfo.issuer.reDn
+      return priData.certInfo.issuer.winDn
     }),
     (this.notBefore = function () {
-      return t.certInfo.notBefore
+      return priData.certInfo.notBefore
     }),
     (this.notAfter = function () {
-      return t.certInfo.notAfter
+      return priData.certInfo.notAfter
     }),
     (this.crlUrl = function () {
-      return t.certInfo.crlUrl
+      return priData.certInfo.crlUrl
+    }),
+    (this.raXmno = function () {
+      var extensions = priData.certInfo.extension
+      for (var index in ((extensions = eval(extensions)), extensions)) {
+        var oid = extensions[index].oid,
+          value = extensions[index].value
+        if ('1.2.156.102001.1.1' === oid) {
+          return value
+        }
+      }
+      return ''
+    }),
+    (this.entQykzno = function () {
+      var extensions = priData.certInfo.extension
+      for (var index in ((extensions = eval(extensions)), extensions)) {
+        var oid = extensions[index].oid,
+          value = extensions[index].value
+        if ('1.2.156.102001.1.3' === oid) {
+          return value
+        }
+      }
+      return ''
+    }),
+    (this.entSbno = function () {
+      var extensions = priData.certInfo.extension
+      for (var index in ((extensions = eval(extensions)), extensions)) {
+        var oid = extensions[index].oid,
+          value = extensions[index].value
+        if ('1.2.156.102001.1.4' === oid) {
+          return value
+        }
+      }
+      return ''
     }),
     (this.signAlg = function () {
-      return tcu.convSignAlg2Str(t.certInfo.signAlg)
+      return tcu.convSignAlg2Str(priData.certInfo.signAlg)
     }),
     (this.publicKeyAlg = function () {
-      return tcu.convPubKeyAlg2Str(t.certInfo.pubKeyAlg)
+      return tcu.convPubKeyAlg2Str(priData.certInfo.pubKeyAlg)
     }),
     (this.publicKeySize = function () {
-      return tcu.convPubKeyAlg2Size(t.certInfo.pubKeyAlg)
+      return tcu.convPubKeyAlg2Size(priData.certInfo.pubKeyAlg)
     }),
     (this.keyUsage = function () {
-      return tcu.convKeyUsageNum2Arr(t.certInfo.keyUsage)
+      return tcu.convKeyUsageNum2Arr(priData.certInfo.keyUsage)
     }),
     (this.extededKeyUsage = function () {
-      return tcu.convExtKeyUsageOID2Name(t.certInfo.extKeyUsage)
+      return tcu.convExtKeyUsageOID2Name(priData.certInfo.extKeyUsage)
     }),
     (this.toBase64 = function () {
-      return t.certInfo.b64
+      return priData.certInfo.b64
     }),
-    (this.signMessage = function (r, e, n, i) {
-      if (((e = void 0 === e || e), void 0 === n)) n = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SM3
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), n)) return null
-      if (!tcu.isStr(r)) return TCACErr.throwErr(ERRMAP.SIGN_INPUT_ERROR), null
-      if (i == TCA.IO.B64 && (r === '' || r.length % 4 !== 0)) return TCACErr.throwErr(ERRMAP.SIGN_INPUT_ERROR), null
-      i = void 0 === i ? TCA.IO.U8 : i
-      var c = TCACore.getInstance(),
-        a = TCA.IO.MSG | i,
-        s = r,
-        o = TCA.IO.MSG | TCA.IO.B64,
-        A = 'noSet',
-        u = tcu.tcaAlg2SDKAlg(n),
-        C = c.getCfg('signPkcs7WithAttr'),
-        l = ['MY', 'Address'],
-        T = [t.certInfo.certID],
-        E = tcu.sign(l, T, u, !1, !0, C, e, !0, a, s, o, A)
-      return E != null ? E.result : null
+    (this.clearPinCache_xc = function () {
+      var certB64 = this.toBase64()
+      var certContainerName = priData.certInfo.certContainerName
+      var keyStoreName = priData.certInfo.keyStoreName
+      var resp
+      try {
+        if (tcu.isFFKyLinFT()) {
+          if (0 != priData.certInfo.keyStoreName.indexOf('Longmai')) {
+            return !0
+          }
+          var certB64 = this.toBase64()
+          return tcu.ffKylinFT.clearPinCache(keyStoreName, certB64)
+        }
+        return tcu.clearPinCache(keyStoreName)
+      } catch (e) {
+        TCACErr.throwErr(e, ERRMAP.CLEAR_PIN_CACHE_ERROR)
+        return null
+      }
     }),
-    (this.signMessageRaw = function (r, e, n) {
-      if (void 0 === e) e = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SM3
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), e)) return null
-      if (!tcu.isStr(r)) return TCACErr.throwErr(ERRMAP.SIGN_INPUT_ERROR), null
-      if (n == TCA.IO.B64 && (r === '' || r.length % 4 !== 0)) return TCACErr.throwErr(ERRMAP.SIGN_INPUT_ERROR), null
-      n = void 0 === n ? TCA.IO.U8 : n
-      var i = TCA.IO.MSG | n,
-        c = r,
-        a = TCA.IO.MSG | TCA.IO.B64,
-        s = 'noSet',
-        o = tcu.tcaAlg2SDKAlg(e),
-        A = ['MY', 'Address'],
-        u = [t.certInfo.certID],
-        C = tcu.sign(A, u, o, !1, !1, !1, !1, !1, i, c, a, s)
-      return C != null ? C.result : null
+    (this.verifyPin = function (userPin) {
+      var certB64 = this.toBase64()
+      var certContainerName = priData.certInfo.certContainerName
+      var keyStoreName = priData.certInfo.keyStoreName
+      var T
+      try {
+        if (tcu.isFFKyLinFT()) {
+          var certB64 = this.toBase64()
+          return null != (T = tcu.ffKylinFT.verifyPin(keyStoreName, certB64, userPin)) ? T.retCode : null
+        }
+      } catch (e) {
+        TCACErr.throwErr(e, ERRMAP.VERIFY_PIN_ERROR)
+        return null
+      }
     }),
-    (this.signFile = function (r, e, n, i, c) {
-      if (((n = void 0 === n || n), (i = void 0 === i ? TCA.IO.BIN : i), void 0 === c))
-        c = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SM3
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), c)) return null
-      var a = TCACore.getInstance(),
-        s = TCA.IO.FILE | i,
-        o = r,
-        A = TCA.IO.FILE | i,
-        u = e,
-        C = tcu.tcaAlg2SDKAlg(c),
-        l = a.getCfg('signPkcs7WithAttr'),
-        T = ['MY', 'Address'],
-        E = [t.certInfo.certID],
-        R = tcu.sign(T, E, C, !1, !0, l, n, !0, s, o, A, u)
-      return R != null
+    (this.clearPinCache = function () {
+      if (tcu.isFFKyLinFT()) {
+        return this.clearPinCache_xc()
+      }
+      var r = { clid: '', method: 'clearpin', params: [priData.certInfo.keyStoreName, this._keyStoreContainer] }
+      r = tcu.json2Str(r)
+      var t = TCACore.getInstance()
+      try {
+        t.call('KeyCom/call', r)
+      } catch (r) {
+        return TCACErr.throwErr(r, ERRMAP.DECRYPT_ERROR), null
+      }
+    }),
+    (this.setPin = function (r) {
+      if (tcu.isFFKyLinFT()) {
+        if (0 != priData.certInfo.keyStoreName.indexOf('Longmai')) {
+          return !0
+        }
+        return this.verifyPin(r)
+      }
+      var t = { clid: '', method: '', params: [priData.certInfo.keyStoreName, r] }
+      t = tcu.json2Str(t)
+      var n = TCACore.getInstance()
+      try {
+        n.call('KeyCom/call', t)
+      } catch (t) {
+        return TCACErr.throwErr(t, ERRMAP.DECRYPT_ERROR), null
+      }
+    })
+  ;(this.signMessage = function (r, t, e, n) {
+    if (((t = void 0 === t || t), void 0 === e)) {
+      e = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SM3
+    } else {
+      if (!tcu.checkHashAlg(this.publicKeyAlg(), e)) {
+        return null
+      }
+    }
+    n = void 0 === n ? TCA.IO.U8 : n
+    var i = TCACore.getInstance(),
+      c = TCA.IO.MSG | n,
+      a = r,
+      o = TCA.IO.MSG | TCA.IO.B64,
+      s = 'noSet',
+      u = tcu.tcaAlg2SDKAlg(e),
+      l = i.getCfg('signPkcs7WithAttr'),
+      A = [priData.certInfo.certID]
+    if (tcu.isFFKyLinFT()) {
+      var C = this.toBase64()
+      var storeName = priData.certInfo.keyStoreName
+      if (0 != storeName.indexOf('Longmai')) {
+        return tcu.ffKylinFT.softSign(storeName, C, u, c, a, o, s, !1, !1, t)
+      }
+      return tcu.ffKylinFT.sign(C, u, c, a, o, s, !1, !1, t)
+    }
+    if (tcu.isSKFProv(priData.certInfo.keyStoreName) && this.publicKeyAlg() == TCA.SM2) {
+      var T,
+        E = tcu.convProvName(priData.certInfo.keyStoreName)
+      return null != (T = tcu.skfSign(E, priData.certInfo.b64, u, !1, !0, l, t, !0, c, a, o, s)) ? T.result : null
+    }
+    return null != (T = tcu.sign(['MY', 'Address'], A, u, !1, !0, l, t, !0, c, a, o, s)) ? T.result : null
+  }),
+    (this.signMessageRaw = function (r, t, e) {
+      if (void 0 === t) {
+        t = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SM3
+      } else {
+        if (!tcu.checkHashAlg(this.publicKeyAlg(), t)) {
+          return null
+        }
+      }
+      e = void 0 === e ? TCA.IO.U8 : e
+      var n = TCA.IO.MSG | e,
+        i = r,
+        c = TCA.IO.MSG | TCA.IO.B64,
+        a = 'noSet',
+        o = tcu.tcaAlg2SDKAlg(t),
+        s = [priData.certInfo.certID]
+      if (tcu.isFFKyLinFT()) {
+        var u = this.toBase64()
+        var storeName = priData.certInfo.keyStoreName
+        if (0 != storeName.indexOf('Longmai')) {
+          return tcu.ffKylinFT.softSign(storeName, u, o, n, i, c, a, !0, !1, !1)
+        }
+        return tcu.ffKylinFT.sign(u, o, n, i, c, a, !0, !1, !1)
+      }
+      if (tcu.isSKFProv(priData.certInfo.keyStoreName) && this.publicKeyAlg() == TCA.SM2) {
+        var l,
+          A = tcu.convProvName(priData.certInfo.keyStoreName)
+        return null != (l = tcu.skfSign(A, priData.certInfo.b64, o, !1, !1, !1, !1, !1, n, i, c, a)) ? l.result : null
+      }
+      return null != (l = tcu.sign(['MY', 'Address'], s, o, !1, !1, !1, !1, !1, n, i, c, a)) ? l.result : null
     }),
-    (this.signFile2Msg = function (r, e, n, i) {
-      if (((e = void 0 === e || e), (n = void 0 === n ? TCA.IO.BIN : n), void 0 === i))
-        i = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SM3
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), i)) return null
+    (this.signFile = function (r, t, e, n, i) {
+      if (((e = void 0 === e || e), (n = void 0 === n ? TCA.IO.BIN : n), void 0 === i)) {
+        i = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SM3
+      } else {
+        if (!tcu.checkHashAlg(this.publicKeyAlg(), i)) {
+          return null
+        }
+      }
       var c = TCACore.getInstance(),
         a = TCA.IO.FILE | n,
-        s = r,
+        o = r,
+        s = TCA.IO.FILE | n,
+        u = t,
+        l = tcu.tcaAlg2SDKAlg(i),
+        A = c.getCfg('signPkcs7WithAttr'),
+        C = [priData.certInfo.certID]
+      if (tcu.isSKFProv(priData.certInfo.keyStoreName) && this.publicKeyAlg() == TCA.SM2) {
+        var T,
+          E = tcu.convProvName(priData.certInfo.keyStoreName)
+        return null != (T = tcu.skfSign(E, priData.certInfo.b64, l, !1, !0, A, e, !0, a, o, s, u)) ? T.result : null
+      }
+      return null != (T = tcu.sign(['MY', 'Address'], C, l, !1, !0, A, e, !0, a, o, s, u))
+    }),
+    (this.signFile2Msg = function (r, t, e, n) {
+      if (((t = void 0 === t || t), (e = void 0 === e ? TCA.IO.BIN : e), void 0 === n)) {
+        n = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SM3
+      } else {
+        if (!tcu.checkHashAlg(this.publicKeyAlg(), n)) {
+          return null
+        }
+      }
+      var i = TCACore.getInstance(),
+        c = TCA.IO.FILE | e,
+        a = r,
         o = TCA.IO.MSG | TCA.IO.B64,
-        A = 'noset',
-        u = tcu.tcaAlg2SDKAlg(i),
-        C = c.getCfg('signPkcs7WithAttr'),
-        l = ['MY', 'Address'],
-        T = [t.certInfo.certID],
-        E = tcu.sign(l, T, u, !1, !0, C, e, !0, a, s, o, A)
-      return E != null ? E.result : null
+        s = tcu.tcaAlg2SDKAlg(n),
+        u = i.getCfg('signPkcs7WithAttr'),
+        l = [priData.certInfo.certID]
+      if (tcu.isSKFProv(priData.certInfo.keyStoreName) && this.publicKeyAlg() == TCA.SM2) {
+        var A,
+          C = tcu.convProvName(priData.certInfo.keyStoreName)
+        return null != (A = tcu.skfSign(C, priData.certInfo.b64, s, !1, !0, u, t, !0, c, a, o, 'noset'))
+          ? A.result
+          : null
+      }
+      return null != (A = tcu.sign(['MY', 'Address'], l, s, !1, !0, u, t, !0, c, a, o, 'noset')) ? A.result : null
     }),
-    (this.signFileRaw = function (r, e, n) {
-      if (((e = void 0 === e ? TCA.IO.BIN : e), void 0 === n)) n = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SM3
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), n)) return null
-      var i = TCA.IO.FILE | e,
-        c = r,
-        a = TCA.IO.MSG | TCA.IO.B64,
-        s = 'noSet',
-        o = tcu.tcaAlg2SDKAlg(n),
-        A = ['MY', 'Address'],
-        u = [t.certInfo.certID],
-        C = tcu.sign(A, u, o, !1, !1, !1, !1, !1, i, c, a, s)
-      return C != null ? C.result : null
+    (this.signFileRaw = function (r, t, e) {
+      if (((t = void 0 === t ? TCA.IO.BIN : t), void 0 === e)) {
+        e = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SM3
+      } else {
+        if (!tcu.checkHashAlg(this.publicKeyAlg(), e)) {
+          return null
+        }
+      }
+      var n = TCA.IO.FILE | t,
+        i = r,
+        c = TCA.IO.MSG | TCA.IO.B64,
+        a = tcu.tcaAlg2SDKAlg(e),
+        o = [priData.certInfo.certID]
+      if (tcu.isSKFProv(priData.certInfo.keyStoreName) && this.publicKeyAlg() == TCA.SM2) {
+        var s,
+          u = tcu.convProvName(priData.certInfo.keyStoreName)
+        return null != (s = tcu.skfSign(u, priData.certInfo.b64, a, !1, !1, !1, !1, !1, n, i, c, 'noSet'))
+          ? s.result
+          : null
+      }
+      return null != (s = tcu.sign(['MY', 'Address'], o, a, !1, !1, !1, !1, !1, n, i, c, 'noSet')) ? s.result : null
     }),
     (this.encryptMessage = function (r, t) {
-      void 0 === t && ((t = this.publicKeyAlg() == 'SM2' ? TCA.SM4 : TCA.DES3), (t = tcu.tcaAlg2SDKAlg(t)))
+      void 0 === t && ((t = 'SM2' == this.publicKeyAlg() ? TCA.SM4 : TCA.DES3), (t = tcu.tcaAlg2SDKAlg(t)))
       var e = [this.toBase64()],
         n = TCA.IO.MSG | TCA.IO.U8,
         i = r,
-        c = TCA.IO.MSG | TCA.IO.B64,
-        a = 'noSet',
-        s = tcu.enc(e, t, !0, n, i, c, a)
-      return s != null ? s.result : null
+        c = TCA.IO.MSG | TCA.IO.B64
+      if (tcu.isFFKyLinFT()) {
+        var a,
+          o = this.toBase64()
+        return (a = tcu.ffKylinFT.enc(o, n, i, c, 'noSet', !1, t)).result
+      }
+      return null != (a = tcu.enc(e, t, !0, n, i, c, 'noSet')) ? a.result : null
     }),
     (this.encryptMessageRaw = function (r) {
       var t = [this.toBase64()],
         e = TCA.IO.MSG | TCA.IO.U8,
         n = r,
         i = TCA.IO.MSG | TCA.IO.B64,
-        c = 'noSet',
-        a = tcu.tcaAlg2SDKAlg(TCA.SM4),
-        s = tcu.enc(t, a, !1, e, n, i, c)
-      return s != null ? s.result : null
+        c = tcu.tcaAlg2SDKAlg(TCA.SM4)
+      if (tcu.isFFKyLinFT()) {
+        var a,
+          o = this.toBase64()
+        return (a = tcu.ffKylinFT.enc(o, e, n, i, 'noSet', !0, c)).result
+      }
+      return null != (a = tcu.enc(t, c, !1, e, n, i, 'noSet')) ? a.result : null
     }),
     (this.encryptFile = function (r, t, e, n) {
       ;(e = void 0 === e ? TCA.IO.BIN : e), (n = tcu.tcaAlg2SDKAlg(TCA.SM4))
       var i = [this.toBase64()],
         c = TCA.IO.FILE | e,
         a = r,
-        s = TCA.IO.FILE | e,
-        o = tcu.enc(i, n, !0, c, a, s, t)
-      return o != null || null
+        o = TCA.IO.FILE | e
+      return null != tcu.enc(i, n, !0, c, a, o, t) || null
     }),
     (this.verifyMessageRaw = function (r, t, e, n) {
-      if (void 0 === e) e = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SHA256
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), e)) return null
+      if (void 0 === e) {
+        e = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SHA256
+      } else {
+        if (!tcu.checkHashAlg(this.publicKeyAlg(), e)) {
+          return null
+        }
+      }
       n = void 0 === n ? TCA.IO.U8 : n
       var i = this.toBase64(),
         c = TCA.VERIFYOPT.CONTEXT_IN_INPUT | TCA.VERIFYOPT.CERT_IN_INPUT,
         a = TCA.IO.MSG | TCA.IO.B64,
-        s = r,
-        o = TCA.IO.MSG | n,
-        A = tcu.tcaAlg2SDKAlg(e),
-        u = tcu.verify(i, !1, !1, A, c, a, s, o, t)
-      return u != null && u.verifyResult
+        o = r,
+        s = TCA.IO.MSG | n,
+        u = tcu.tcaAlg2SDKAlg(e)
+      if (tcu.isFFKyLinFT()) {
+        var l,
+          A = this.toBase64()
+        return !!(l = tcu.ffKylinFT.verify(A, s, t, a, o, !0, c, u, !1)).verifyResult && l.verifyResult
+      }
+      return null != (l = tcu.verify(i, !1, !1, u, c, a, o, s, t)) && l.verifyResult
     }),
     (this.verifyFileRaw = function (r, t, e, n) {
-      if (void 0 === n) n = this.publicKeyAlg() === 'RSA' ? TCA.SHA1 : TCA.SHA256
-      else if (!tcu.checkHashAlg(this.publicKeyAlg(), n)) return null
+      if (void 0 === n) {
+        n = 'RSA' === this.publicKeyAlg() ? TCA.SHA1 : TCA.SHA256
+      } else {
+        if (!tcu.checkHashAlg(this.publicKeyAlg(), n)) {
+          return null
+        }
+      }
       var i = this.toBase64(),
         c = TCA.VERIFYOPT.CONTEXT_IN_INPUT | TCA.VERIFYOPT.CERT_IN_INPUT,
         a = TCA.IO.MSG | TCA.IO.B64,
-        s = r,
-        o = TCA.IO.FILE | TCA.IO.BIN,
-        A = tcu.tcaAlg2SDKAlg(n),
-        u = tcu.verify(i, !1, !1, A, c, a, s, o, t)
-      return u != null && u.verifyResult
+        o = r,
+        s = TCA.IO.FILE | TCA.IO.BIN,
+        u = tcu.tcaAlg2SDKAlg(n),
+        l = tcu.verify(i, !1, !1, u, c, a, o, s, t)
+      return null != l && l.verifyResult
     }),
     (this.decryptMessageRaw = function (r) {
-      var e = ['MY', 'Address'],
-        n = [t.certInfo.certID],
-        i = TCA.IO.MSG | TCA.IO.B64,
-        c = r,
-        a = TCA.IO.MSG | TCA.IO.U8,
-        s = 'noSet',
-        o = tcu.dec(e, n, !1, i, c, a, s)
-      return o != null ? o.result : null
+      var t = [priData.certInfo.certID],
+        e = TCA.IO.MSG | TCA.IO.B64,
+        n = r,
+        i = TCA.IO.MSG | TCA.IO.U8
+      if (tcu.isFFKyLinFT()) {
+        var c,
+          a = this.toBase64()
+        return null != (c = tcu.ffKylinFT.dec(!1, e, n, i, 'noSet', a)) ? c.result : null
+      }
+      return null != (c = tcu.dec(['MY', 'Address'], t, !1, e, n, i, 'noSet')) ? c.result : null
     }),
     (this.deleteCert = function () {
+      if (tcu.isFFKyLinFT()) {
+        var u = this.toBase64()
+        var storeName = priData.certInfo.keyStoreName
+        if (0 != storeName.indexOf('Longmai')) {
+          return tcu.ffKylinFT.softDelCert(storeName, u)
+        }
+        return tcu.ffKylinFT.delCert(storeName, u)
+      }
       var r,
-        e = [t.certInfo.certID],
-        n = TCACore.getInstance(),
-        i = '{"certStore" : ["MY", "Address"], "certIDArr" : ["' + e + '"]}'
+        t = [priData.certInfo.certID],
+        e = TCACore.getInstance(),
+        n = '{"certStore" : ["MY", "Address"], "certIDArr" : ["' + t + '"]}'
       try {
-        r = n.call('Certificate/deleteCert', i)
+        r = e.call('Certificate/deleteCert', n)
       } catch (r) {
         return TCACErr.throwErr(r, ERRMAP.CERTIFICATE_DELETE_ERROR), !1
       }
-      return r != null
+      return null != r
     }),
     (this.signLogonData = function (r) {
       return this.signMessage('LOGONDATA:' + r)
@@ -229,72 +415,98 @@ function Certificate(r) {
     (this.signLogondata = this.signLogonData),
     (this.encryptRaw = this.encryptMessageRaw),
     (this.verifyFile = function (r, t, e) {
-      return (r = null), (t = null), (e = null), TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
+      return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
     (this.verifyRaw = this.verifyMessageRaw),
     (this.Delete = this.deleteCert),
     (this.b64str = this.toBase64),
     (this.exportPFX = function (r) {
-      return (r = null), TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
+      return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
     (this.exportPFX2File = function (r, t) {
-      return (r = null), (t = null), TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
+      return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
     (this.show = function () {
       return TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     })
 }
-function CertSet(r) {
-  var t = {}
-  if (((t.certArr = []), r instanceof Array)) {
-    if (r.length != 0)
-      if (r[0] instanceof Certificate) t.certArr = r
-      else {
-        if (!tcu.isStr(r[0])) return void TCACErr.throwErr(ERRMAP.CERT_SET_INIT_ERROR_TYPE)
-        for (var e = 0; e < r.length; e++) t.certArr.push(new Certificate(r[e]))
-      }
-  } else if (tcu.isStr(r)) t.certArr.push(new Certificate(r))
-  else {
-    if (r instanceof Pkcs7) return void TCACErr.throwErr(ERRMAP.CERT_SET_INIT_ERROR_TYPE_2)
-    if (r instanceof Certificate) t.certArr.push(r)
-    else if (arguments.length != 0) return void TCACErr.throwErr(ERRMAP.CERT_SET_INIT_ERROR_TYPE_3)
+function CertSet(a) {
+  var c = { certArr: [] }
+  if (a instanceof Array) {
+    if (0 != a.length) {
+      if (a[0] instanceof Certificate) {
+        c.certArr = a
+      } else {
+        if (!tcu.isStr(a[0])) {
+          return void TCACErr.throwErr(ERRMAP.CERT_SET_INIT_ERROR_TYPE)
+        }
+        for (var b = 0; b < a.length; b++) {
+          c.certArr.push(new Certificate(a[b]))
+        }
+      }
+    }
+  } else {
+    if (tcu.isStr(a)) {
+      c.certArr.push(new Certificate(a))
+    } else {
+      if (a instanceof Pkcs7) {
+        return void TCACErr.throwErr(ERRMAP.CERT_SET_INIT_ERROR_TYPE_2)
+      }
+      if (a instanceof Certificate) {
+        c.certArr.push(a)
+      } else {
+        if (0 != arguments.length) {
+          return void TCACErr.throwErr(ERRMAP.CERT_SET_INIT_ERROR_TYPE_3)
+        }
+      }
+    }
   }
   ;(this.size = function () {
-    return t.certArr.length
+    return c.certArr.length
   }),
-    (this.get = function (r) {
-      return t.certArr[r]
+    (this.get = function (d) {
+      return c.certArr[d]
     }),
-    (this.bySerialnumber = function (r) {
-      for (var e = 0; e < t.certArr.length; e++)
-        if (t.certArr[e].serialNumber() === r.toUpperCase()) return new CertSet(t.certArr[e])
+    (this.bySerialnumber = function (e) {
+      for (var d = 0; d < c.certArr.length; d++) {
+        if (c.certArr[d].serialNumber() === e.toUpperCase()) {
+          return new CertSet(c.certArr[d])
+        }
+      }
       return new CertSet()
     }),
-    (this.bySubject = function (r) {
-      for (var e = [], n = 0; n < t.certArr.length; n++) t.certArr[n].subject().search(r) >= 0 && e.push(t.certArr[n])
-      return e.length == 0 ? new CertSet() : new CertSet(e)
+    (this.bySubject = function (d) {
+      for (var f = [], e = 0; e < c.certArr.length; e++) {
+        0 <= c.certArr[e].subject().search(d) && f.push(c.certArr[e])
+      }
+      return 0 == f.length ? new CertSet() : new CertSet(f)
     }),
-    (this.byIssuer = function (r) {
-      for (var e = [], n = 0; n < t.certArr.length; n++) t.certArr[n].issuer().search(r) >= 0 && e.push(t.certArr[n])
-      return e.length == 0 ? new CertSet() : new CertSet(e)
+    (this.byIssuer = function (d) {
+      for (var f = [], e = 0; e < c.certArr.length; e++) {
+        0 <= c.certArr[e].issuer().search(d) && f.push(c.certArr[e])
+      }
+      return 0 == f.length ? new CertSet() : new CertSet(f)
     }),
-    (this.byValidity = function (r) {
-      for (var e = arguments.length == 0 ? new Date() : new Date(date), n = [], i = 0; i < t.certArr.length; i++)
-        t.certArr[i].notBefore() <= e && e <= t.certArr[i].notAfter() && n.push(t.certArr[i])
-      return n.length == 0 ? new CertSet() : new CertSet(n)
+    (this.byValidity = function (g) {
+      for (var f = 0 == arguments.length ? new Date() : new Date(date), d = [], e = 0; e < c.certArr.length; e++) {
+        c.certArr[e].notBefore() <= f && f <= c.certArr[e].notAfter() && d.push(c.certArr[e])
+      }
+      return 0 == d.length ? new CertSet() : new CertSet(d)
     }),
-    (this.byKeyUsage = function (r) {
-      var e = 0
-      if (r instanceof Array) e = tcu.convKeyUsageArr2Num(r)
-      else {
-        if (!tcu.isNum(r)) return TCACErr.throwErr(ERRMAP.CERT_SET_FILTER_KEYUSAGE_ERROR), null
-        e = r
-      }
-      for (var n = [], i = 0; i < t.certArr.length; i++) {
-        var c = tcu.convKeyUsageArr2Num(t.certArr[i].keyUsage())
-        ;(c & e) == e && n.push(t.certArr[i])
-      }
-      return n.length == 0 ? new CertSet() : new CertSet(n)
+    (this.byKeyUsage = function (g) {
+      var f = 0
+      if (g instanceof Array) {
+        f = tcu.convKeyUsageArr2Num(g)
+      } else {
+        if (!tcu.isNum(g)) {
+          return TCACErr.throwErr(ERRMAP.CERT_SET_FILTER_KEYUSAGE_ERROR), null
+        }
+        f = g
+      }
+      for (var d = [], e = 0; e < c.certArr.length; e++) {
+        ;(tcu.convKeyUsageArr2Num(c.certArr[e].keyUsage()) & f) == f && d.push(c.certArr[e])
+      }
+      return 0 == d.length ? new CertSet() : new CertSet(d)
     }),
     (this.forSign = function () {
       return this.byKeyUsage(128)
@@ -303,446 +515,623 @@ function CertSet(r) {
       return this.byKeyUsage(32)
     }),
     (this.bySubjcet = this.bySubject),
-    (this.encryptMessage = function (r, t) {
+    (this.encryptMessage = function (e, d) {
       return TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
-    (this.encryptFile = function (r, t, e, n) {
+    (this.encryptFile = function (g, f, d, e) {
       return TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
     (this.uiSelect = function () {
       return TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     })
 }
-function CertStore(r, t) {
-  if (!tcu.isStr(r) || !tcu.isNum(t)) return TCACErr.throwErr(ERRMAP.CERTSTORE_INIT_WRONGTYPE), null
-  var e = TCACore.getInstance()
-  r = e.getCfg('useAlias') ? e.alias2Full(r) : r
-  var n = {}
-  ;(n.storeName = r),
-    (n.storeType = t),
-    (this.genCsr = function (r, t) {
-      var e,
-        i,
-        c = TCACore.getInstance(),
-        a = 1,
-        s = 'topca',
-        o = c.getCfg('genKeySpec'),
-        A = c.getCfg('exportKeyAble') ? 1 : 0,
-        u = 'noSet',
-        C = c.getCfg('genCsrUseSHA256') ? TCA.SHA256 : TCA.SHA1
-      if (arguments.length === 1)
-        if (tcu.isStr(r))
-          (a = 1), (e = tcu.tcaAlg2SDKAlg(r)), (i = r == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(C))
-        else {
-          if (!(r instanceof Certificate)) return TCACErr.throwErr(ERRMAP.GEN_CSR_ERROR_PARAMS), null
-          var l,
-            T = r.publicKeyAlg(),
-            E = r.publicKeySize()
-          if (T === 'RSA' && E === 1024) l = TCA.RSA1024
-          else if (T == 'RSA' && E === 2048) l = TCA.RSA2048
-          else {
-            if (T != 'SM2') return TCACErr.throwErr(ERRMAP.GEN_CSR_ERR_PUBKEY_ALG), null
-            l = TCA.SM2
+function CertStore(a, f) {
+  if (!tcu.isStr(a) || !tcu.isNum(f)) {
+    return TCACErr.throwErr(ERRMAP.CERTSTORE_INIT_WRONGTYPE), null
+  }
+  var c = TCACore.getInstance()
+  a = c.getCfg('useAlias') ? c.alias2Full(a) : a
+  var d = {}
+  function b() {
+    tcu.clearStore(a, f)
+  }
+  ;(d.storeName = a),
+    (d.storeType = f),
+    (this.clearStore = function () {
+      b()
+    }),
+    (this.genCsr = function (z, v) {
+      var B,
+        w,
+        m = TCACore.getInstance(),
+        F = 1,
+        H = 'topca',
+        G = m.getCfg('genKeySpec'),
+        p = m.getCfg('exportKeyAble') ? 1 : 0,
+        i = 'noSet',
+        j = m.getCfg('genCsrUseSHA256') ? TCA.SHA256 : TCA.SHA1
+      if (tcu.isFFKyLinFT()) {
+        if (1 !== arguments.length) {
+          return 2 !== arguments.length
+            ? 0 !== arguments.length
+              ? (TCACErr.throwErr(ERRMAP.GEN_CSR_ERROR_PARAMS), null)
+              : ((F = 1),
+                (B = tcu.tcaAlg2SDKAlg(TCA.SM2)),
+                (w = tcu.tcaAlg2SDKAlg(TCA.SM3)),
+                new Csr((h = tcu.ffKylinFT.genCsr(!0, '', w, B)).csrInfo))
+            : ((F = 1),
+              (H = v),
+              (B = tcu.tcaAlg2SDKAlg(z)),
+              (w = z == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(j)),
+              new Csr((h = tcu.ffKylinFT.genCsr(!0, '', w, B)).csrInfo))
+        }
+        if (tcu.isStr(z)) {
+          return (
+            (B = tcu.tcaAlg2SDKAlg(z)),
+            (w = z == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(j)),
+            0 == a.indexOf('Longmai')
+              ? new Csr((h = tcu.ffKylinFT.genCsr(!0, '', w, B)).csrInfo)
+              : new Csr((h = tcu.ffKylinFT.softGenCsr(!0, '', w, B, a)).csrInfo)
+          )
+        }
+        if (z instanceof Certificate) {
+          var D = z.publicKeyAlg(),
+            x = z.publicKeySize()
+          if ('RSA' === D && 1024 === x) {
+            g = TCA.RSA1024
+          } else {
+            if ('RSA' == D && 2048 === x) {
+              g = TCA.RSA2048
+            } else {
+              if ('SM2' != D) {
+                return TCACErr.throwErr(ERRMAP.GEN_CSR_ERR_PUBKEY_ALG), null
+              }
+              g = TCA.SM2
+            }
+          }
+          return (
+            (B = tcu.tcaAlg2SDKAlg(g)),
+            (w = g == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(j)),
+            (G = z._keySpec),
+            (i = z._keyStoreContainer),
+            new Csr((h = tcu.ffKylinFT.genCsr(!1, i, w, B)).csrInfo)
+          )
+        }
+        return TCACErr.throwErr(ERRMAP.GEN_CSR_ERROR_PARAMS), null
+      }
+      for (
+        var e = [
+            'Longmai mToken GM3000 for HNCA CSP V1.1',
+            'Longmai',
+            'HSIC SKF CSP For HD Provider',
+            'HSIC',
+            'HaiTai Cryptographic Service Provider 20522',
+            'HaiTai SKF 20522 For HunanCA'
+          ],
+          k = !1,
+          y = 0;
+        y < e.length && !(k = d.storeName == e[y]);
+        y++
+      ) {}
+      if (k) {
+        return (function (l, A, r) {
+          0 == l.indexOf('Longmai') && (l = 'Longmai'),
+            0 == l.indexOf('HSIC') && (l = 'HSIC'),
+            0 == l.indexOf('HaiTai') && (l = 'HaiTai SKF 20522 For HunanCA'),
+            void 0 === r && (r = 'topca')
+          var t = tcu.tcaAlg2SDKAlg(A),
+            o = A == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(TCA.SHA1),
+            s = TCACore.getInstance(),
+            u = 1
+          A instanceof Certificate && ((u = 2), (r = A.toBase64()))
+          var n,
+            C =
+              '{"mode" : ' +
+              u +
+              ',"subject" : "' +
+              r +
+              '","provName" : "' +
+              l +
+              '","containerName" : "","keyAlg" :' +
+              t +
+              ',"hashAlg" : ' +
+              o +
+              ',"certId" : ""}'
+          try {
+            n = s.call('skf/skfGenCsrHdl', C)
+          } catch (l) {
+            return TCACErr.throwErr(l, ERRMAP.GEN_CSR_ERROR), null
+          }
+          return new Csr(n.csrInfo)
+        })(d.storeName, z, v)
+      }
+      if (1 === arguments.length) {
+        if (tcu.isStr(z)) {
+          ;(F = 1), (B = tcu.tcaAlg2SDKAlg(z)), (w = z == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(j))
+        } else {
+          if (!(z instanceof Certificate)) {
+            return TCACErr.throwErr(ERRMAP.GEN_CSR_ERROR_PARAMS), null
+          }
+          var g
+          ;(D = z.publicKeyAlg()), (x = z.publicKeySize())
+          if ('RSA' === D && 1024 === x) {
+            g = TCA.RSA1024
+          } else {
+            if ('RSA' == D && 2048 === x) {
+              g = TCA.RSA2048
+            } else {
+              if ('SM2' != D) {
+                return TCACErr.throwErr(ERRMAP.GEN_CSR_ERR_PUBKEY_ALG), null
+              }
+              g = TCA.SM2
+            }
           }
-          ;(a = 2),
-            (e = tcu.tcaAlg2SDKAlg(l)),
-            (i = l == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(C)),
-            (o = r._keySpec),
-            (u = r._keyStoreContainer)
+          ;(F = 2),
+            (B = tcu.tcaAlg2SDKAlg(g)),
+            (w = g == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(j)),
+            (G = z._keySpec),
+            (i = z._keyStoreContainer)
         }
-      else if (arguments.length === 2)
-        (a = 1),
-          (s = t),
-          (e = tcu.tcaAlg2SDKAlg(r)),
-          (i = r == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(C))
-      else {
-        if (arguments.length !== 0) return TCACErr.throwErr(ERRMAP.GEN_CSR_ERROR_PARAMS), null
-        ;(a = 1), (e = tcu.tcaAlg2SDKAlg(TCA.SM2)), (i = tcu.tcaAlg2SDKAlg(TCA.SM3))
-      }
-      u = u.replace(/\r/g, '\\r').replace(/\n/g, '\\n').replace(/\"/g, '\\"').replace(/\\/g, '\\\\')
-      var R,
-        g =
+      } else {
+        if (2 === arguments.length) {
+          b(),
+            (F = 1),
+            (H = v),
+            (B = tcu.tcaAlg2SDKAlg(z)),
+            (w = z == TCA.SM2 ? tcu.tcaAlg2SDKAlg(TCA.SM3) : tcu.tcaAlg2SDKAlg(j))
+        } else {
+          if (0 !== arguments.length) {
+            return TCACErr.throwErr(ERRMAP.GEN_CSR_ERROR_PARAMS), null
+          }
+          b(), (F = 1), (B = tcu.tcaAlg2SDKAlg(TCA.SM2)), (w = tcu.tcaAlg2SDKAlg(TCA.SM3))
+        }
+      }
+      i = i.replace(/\r/g, '\\r').replace(/\n/g, '\\n').replace(/\"/g, '\\"').replace(/\\/g, '\\\\')
+      var h,
+        q =
           '{"mode" : ' +
-          a +
+          F +
           ',"subject" : "' +
-          s +
+          H +
           '","provName" : "' +
-          n.storeName +
+          d.storeName +
           '","provType" : ' +
-          n.storeType +
+          d.storeType +
           ',"containerName" : "' +
-          u +
+          i +
           '","keySpec" :' +
-          o +
+          G +
           ',"keyAlg" :' +
-          e +
+          B +
           ',"hashAlg" : ' +
-          i +
+          w +
           ',"opation" : ' +
-          A +
+          p +
           '}'
       try {
-        R = c.call('Csr/genCsr', g)
-      } catch (r) {
-        return TCACErr.throwErr(r, ERRMAP.GEN_CSR_ERROR), null
+        h = m.call('Csr/genCsr', q)
+      } catch (z) {
+        return TCACErr.throwErr(z, ERRMAP.GEN_CSR_ERROR), null
       }
-      return new Csr(R.csrInfo)
+      return new Csr(h.csrInfo)
     }),
     (this.listCerts = function () {
-      for (var r = CertStore.listAllCerts(), t = [], e = 0; e < r.size(); e++) {
-        var i = r.get(e)
-        i._keyStoreName === n.storeName && t.push(i)
+      for (var i = CertStore.listAllCerts(), h = [], e = 0; e < i.size(); e++) {
+        var g = i.get(e)
+        g._keyStoreName === d.storeName && h.push(g)
       }
-      return new CertSet(t)
+      return new CertSet(h)
     }),
     (this.getSupportedKeyAlgs = function () {
       return TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
-    (this.importPFX = function (r, t) {
-      return (r = null), (t = null), TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
+    (this.importPFX = function (g, e) {
+      return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
-    (this.importPFXFile = function (r, t) {
-      return (r = null), (t = null), TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
+    (this.importPFXFile = function (g, e) {
+      return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
     }),
     (this.name = function () {
-      return n.storeName
+      return d.storeName
     })
 }
-function Csr(r) {
-  var t = {}
-  ;(t.csrInfo = null),
-    tcu.isObj(r) ? (t.csrInfo = r) : TCACErr.throwErr(ERRMAP.CSR_INIT_ERROR_TYPE),
-    (this.subject = function () {
-      return t.csrInfo.subject.winDN
-    }),
-    (this.toBase64 = function () {
-      return t.csrInfo.b64
-    })
-}
-function Pkcs7(r) {
-  var t = {}
-  if (((t.pkcs7Info = null), !tcu.isStr(r))) return TCACErr.throwErr(ERRMAP.PKCS7_INIT_ERROR_TYPE), null
-  var e,
-    n =
-      '{"inType" : ' +
-      (TCA.IO.MSG | TCA.IO.B64) +
-      ', "inParam" : "' +
-      r +
-      '", "certs" : true, "content" : true, "b64" : false}',
-    i = TCACore.getInstance()
-  try {
-    e = i.call('Pkcs7/parsePkcs7', n)
-  } catch (r) {
-    return TCACErr.throwErr(r, ERRMAP.LIST_CERT_ERROR), null
-  }
-  ;(t.pkcs7Info = e.pkcs7Info),
-    (t.pkcs7Info.b64 = r),
-    (this.verifyMessage = function (r) {
-      var e,
-        n = '',
-        i = TCA.VERIFYOPT.CERT_IN_P7,
-        c = TCA.IO.MSG | TCA.IO.U8
-      void 0 != r
-        ? ((i |= TCA.VERIFYOPT.CONTEXT_IN_INPUT), (e = r))
-        : ((i |= TCA.VERIFYOPT.CONTEXT_IN_P7), (e = 'noSet'))
-      var a = TCA.IO.MSG | TCA.IO.B64,
-        s = t.pkcs7Info.b64,
-        o = tcu.verify(n, !1, !0, 1, i, a, s, c, e)
-      return o === null ? null : o.verifyResult ? new Certificate(o.b64Cert) : null
-    }),
-    (this.decryptMessage = function () {
-      var r = ['MY', 'Address'],
-        e = [],
-        n = TCA.IO.MSG | TCA.IO.B64,
-        i = t.pkcs7Info.b64,
-        c = TCA.IO.MSG | TCA.IO.U8,
-        a = 'noSet',
-        s = tcu.dec(r, e, !0, n, i, c, a)
-      return s != null ? s.result : null
-    }),
-    (this.contentMessage = function () {
-      return t.pkcs7Info.isSigned && t.pkcs7Info.hasContent ? t.pkcs7Info.content : null
-    }),
-    (this.verify = this.verifyMessage),
-    (this.toBase64 = function () {
-      return t.pkcs7Info.b64
-    })
-}
-function TCACErr(r) {
-  ;(this._errarr = []),
-    r instanceof TCACErr && (this._errarr = r._errarr),
-    (this.addErr = function (r) {
-      var t = r.code,
-        e = r.msg
-      ;(this.number = t > 0 ? t : 4294967296 + t),
-        (this.description = e),
-        this._errarr.push({ code: this.number.toString(16).toUpperCase(), msg: e })
-    }),
-    (this.toStr = function () {
-      for (var r = '', t = 0; t < this._errarr.length; t++)
-        r += this._errarr[t].msg + ', 错误码：0x' + this._errarr[t].code + ', \r\n'
-      return r.substr(0, r.length - 4)
-    })
-}
-function tcu() {}
 ;(CertStore.listAllCerts = function () {
-  for (var r = TCACore.getInstance(), t = ['MY', 'Address'], e = [], n = 0; n < t.length; n++) {
-    var i = '{"certStoreName" : "' + t[n] + '", "needB64" : true}',
-      c = null
+  if (tcu.isFFKyLinFT()) {
+    return tcu.ffKylinFT.listAllCerts()
+  }
+  for (var b = TCACore.getInstance(), l = ['MY', 'Address'], h = [], f = 0; f < l.length; f++) {
+    var g = '{"certStoreName" : "' + l[f] + '", "needB64" : true}',
+      j = null
     try {
-      c = r.call('CertStore/listCerts', i)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.LIST_CERT_ERROR), new CertSet()
+      j = b.call('CertStore/listCerts', g)
+    } catch (b) {
+      return TCACErr.throwErr(b, ERRMAP.LIST_CERT_ERROR), new CertSet()
     }
-    for (var a = c.certArr, s = 0; s < a.length; s++) {
-      ;(a[s].notBefore = new Date(a[s].notBefore)), (a[s].notAfter = new Date(a[s].notAfter))
-      var o = new Certificate(a[s])
-      r.certInLic(o) && e.push(o)
+    for (var k = j.certArr, d = 0; d < k.length; d++) {
+      ;(k[d].notBefore = new Date(k[d].notBefore)), (k[d].notAfter = new Date(k[d].notAfter))
+      var m = new Certificate(k[d])
+      b.certInLic(m) && h.push(m)
     }
   }
-  return new CertSet(e)
+  return new CertSet(h)
 }),
-  (CertStore.listStore = function (r) {
-    for (var t = CertStore.listKeyStore(r), e = [], n = 0; n < t.length; n++) e.push(t[n].name)
-    return e
+  (CertStore.listStore = function (d) {
+    var c
+    c = tcu.isFFKyLinFT() ? tcu.ffKylinFT.listKeyStore() : CertStore.listKeyStore(d)
+    for (var a = [], b = 0; b < c.length; b++) {
+      a.push(c[b].name)
+    }
+    return a
   }),
-  (CertStore.byName = function (r) {
-    for (var t = CertStore.listKeyStore(!1), e = 0; e < t.length; e++)
-      if (r === t[e].name) return new CertStore(t[e].name, t[e].type)
+  (CertStore.byName = function (c) {
+    var b
+    b = tcu.isFFKyLinFT() ? tcu.ffKylinFT.listKeyStore() : CertStore.listKeyStore()
+    for (var a = 0; a < b.length; a++) {
+      if (c === b[a].name) {
+        return new CertStore(b[a].name, b[a].type)
+      }
+    }
     return null
   }),
-  (CertStore.byCert = function (r) {
-    return r instanceof Certificate
-      ? new CertStore(r._keyStoreName, r._keyStoreType)
+  (CertStore.byCert = function (a) {
+    return a instanceof Certificate
+      ? new CertStore(a._keyStoreName, a._keyStoreType)
       : (TCACErr.throwErr(ERRMAP.BY_CERT_ERR_TYPE), null)
   }),
-  (CertStore.installCert = function (r, t, e) {
-    var n,
-      i,
-      c = TCACore.getInstance()
-    if (arguments.length === 1)
-      (n = 'InstallSignCert/installSignCert'),
-        r instanceof Certificate && (r = r.toBase64()),
-        (i = '{"certStoreName"   : "MY", "caCertStoreName" : "Ca", "b64SignCertP7"   : "' + r + '"}')
-    else {
-      if (arguments.length !== 3) return TCACErr.throwErr(ERRMAP.INSTALL_CERT_ERR_PARAMS), null
-      n = 'InstallEncCert/installEncCert'
-      for (var a = e.split('&'), s = {}, o = 0; o < a.length; o++) {
-        var A = a[o].split('=')
-        s[A[0]] = tcu.urlDec(A[1])
-      }
-      var u,
-        C = s.userSeal,
-        l = s.encPrivateKeyUser,
-        T = s.userCipher,
-        E = s.userIV
-      switch (T) {
+  (CertStore.installCert = function (h, p, F) {
+    if (tcu.isFFKyLinFT()) {
+      if (1 == arguments.length) {
+        return new Certificate((D = tcu.ffKylinFT.installSign(h)).certAndKeyInfo.cert.b64)
+      }
+      if (3 !== arguments.length) {
+        return TCACErr.throwErr(ERRMAP.INSTALL_CERT_ERR_PARAMS), null
+      }
+      for (var j = F.split('&'), v = {}, d = 0; d < j.length; d++) {
+        v[(w = j[d].split('='))[0]] = tcu.urlDec(w[1])
+      }
+      var z = v.userSeal,
+        g = v.encPrivateKeyUser,
+        x = v.userCipher,
+        B = v.userIV
+      switch (x) {
         case 'AES':
         case 'AES_128':
-          u = TCA.AES
+          y = TCA.AES
           break
         case 'DES':
-          u = TCA.DES
+          y = TCA.DES
           break
         case 'DESEDE':
         case 'DES3':
         case '3DES':
-          u = TCA.DES3
+          y = TCA.DES3
           break
         case 'SM4':
         case 'SMS4':
-          u = TCA.SM4
+          y = TCA.SM4
           break
         case 'SM1':
-          u = TCA.SM1
+          y = TCA.SM1
           break
         case 'rc2':
         case 'AES_192':
         case 'AES_256':
           return TCACErr.throwErr(ERRMAP.INSTALL_CERT_ERR_UNKNOWN_SYMMALG), null
         default:
-          u = TCA.AES
-      }
-      u = tcu.tcaAlg2SDKAlg(u)
-      var R,
-        g = new Certificate(r),
-        S = g._keyStoreName
-      ;(R = S.indexOf('Microsoft') >= 0 || S.indexOf('iTrus') >= 0 || S == 'RSA' ? 1 : c.getCfg('installMode') ? 2 : 1),
-        (i =
-          '{"certStoreName" : "MY", "mode" : ' +
-          R +
-          ', "b64SignCert" : "' +
-          r +
-          '", "b64UserSeal" : "' +
-          C +
-          '", "b64EncUserCert" : "' +
-          t +
-          '", "b64EncUserPrivateKey" : "' +
-          l +
-          '", "symmAlg" : ' +
-          u +
-          ', "b64IV" : "' +
-          E +
-          '"}')
-    }
-    var f
+          y = TCA.AES
+      }
+      return (
+        (y = tcu.tcaAlg2SDKAlg(y)),
+        new Certificate((D = tcu.ffKylinFT.installEnc(h, p, z, B, y, g)).certAndKeyInfo.cert.b64)
+      )
+    }
+    var k,
+      b,
+      D,
+      m = TCACore.getInstance()
+    if (1 === arguments.length) {
+      ;(k = 'InstallSignCert/installSignCert'),
+        (b = '{"certStoreName"   : "MY", "caCertStoreName" : "Ca", "b64SignCertP7"   : "' + h + '"}')
+    } else {
+      if (3 !== arguments.length) {
+        return TCACErr.throwErr(ERRMAP.INSTALL_CERT_ERR_PARAMS), null
+      }
+      k = 'InstallEncCert/installEncCert'
+      for (j = F.split('&'), v = {}, d = 0; d < j.length; d++) {
+        var w
+        v[(w = j[d].split('='))[0]] = tcu.urlDec(w[1])
+      }
+      var y
+      ;(z = v.userSeal), (g = v.encPrivateKeyUser), (x = v.userCipher), (B = v.userIV)
+      switch (x) {
+        case 'AES':
+        case 'AES_128':
+          y = TCA.AES
+          break
+        case 'DES':
+          y = TCA.DES
+          break
+        case 'DESEDE':
+        case 'DES3':
+        case '3DES':
+          y = TCA.DES3
+          break
+        case 'SM4':
+        case 'SMS4':
+          y = TCA.SM4
+          break
+        case 'SM1':
+          y = TCA.SM1
+          break
+        case 'rc2':
+        case 'AES_192':
+        case 'AES_256':
+          return TCACErr.throwErr(ERRMAP.INSTALL_CERT_ERR_UNKNOWN_SYMMALG), null
+        default:
+          y = TCA.AES
+      }
+      y = tcu.tcaAlg2SDKAlg(y)
+      var q = new Certificate(h)._keyStoreName
+      b =
+        '{"certStoreName" : "MY", "mode" : ' +
+        (0 <= q.indexOf('Microsoft') || 0 <= q.indexOf('iTrus') || 'RSA' == q ? 1 : m.getCfg('installMode') ? 2 : 1) +
+        ', "b64SignCert" : "' +
+        h +
+        '", "b64UserSeal" : "' +
+        z +
+        '", "b64EncUserCert" : "' +
+        p +
+        '", "b64EncUserPrivateKey" : "' +
+        g +
+        '", "symmAlg" : ' +
+        y +
+        ', "b64IV" : "' +
+        B +
+        '"}'
+    }
     try {
-      f = c.call(n, i)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.INSTALL_CERT_ERR), null
+      D = m.call(k, b)
+    } catch (h) {
+      return TCACErr.throwErr(h, ERRMAP.INSTALL_CERT_ERR), null
     }
-    return f.onlyCertChain ? null : new Certificate(f.certInfo)
+    return D.onlyCertChain ? null : new Certificate(D.certInfo)
   }),
-  (CertStore.listKeyStore = function (r) {
-    var t = TCACore.getInstance(),
-      e = '{"mode" : 1 }',
-      n = null
+  (CertStore.listKeyStore = function (b) {
+    var l = TCACore.getInstance(),
+      h = null
     try {
-      n = t.call('KeyStore/listKeyStore', e)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.LIST_STORE_ERROR), []
+      h = l.call('KeyStore/listKeyStore', '{"mode" : 1 }')
+    } catch (b) {
+      return TCACErr.throwErr(b, ERRMAP.LIST_STORE_ERROR), []
+    }
+    var f = h.keyStoreArr
+    l.setKeyStoreListCache(f), (b = !l.getCfg('disableWhiteList') && b)
+    for (var g = l.getCfg('whiteList'), j = l.getCfg('useAlias'), k = [], d = 0; d < f.length; d++) {
+      var m = f[d].name
+      b
+        ? tcu.strInList(m, g) && k.push({ name: j ? l.full2Alias(m) : m, type: f[d].type })
+        : k.push({ name: j ? l.full2Alias(m) : m, type: f[d].type })
     }
-    var i = n.keyStoreArr
-    t.setKeyStoreListCache(i), (r = !t.getCfg('disableWhiteList') && r)
-    for (var c = t.getCfg('whiteList'), a = t.getCfg('useAlias'), s = [], o = 0; o < i.length; o++) {
-      var A = i[o].name
-      r
-        ? tcu.strInList(A, c) && s.push({ name: a ? t.full2Alias(A) : A, type: i[o].type })
-        : s.push({ name: a ? t.full2Alias(A) : A, type: i[o].type })
+    return k
+  }),
+  (CertStore.importP12 = function (e, d, f) {
+    if (tcu.isFFKyLinFT()) {
+      var a = void 0 === f ? TCA.IO.MSG | TCA.IO.B64 : TCA.IO.FILE | f
+      var c = tcu.ffKylinFT.softImportP12(e, a, d)
+      var b = new Certificate(tcu.ffKylinFT.convCertInfo(c.certAndKeyInfo))
+      return b
     }
-    return s
+    return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
   })
+CertStore.getDriveVersion = function () {
+  if (tcu.isFFKyLinFT()) {
+    return tcu.ffKylinFT.getDriveVersion()
+  }
+  return null, TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
+}
 var CryptoUtil = {}
-;(CryptoUtil.random = function (r) {
-  var t = tcu.random(r)
-  return t != null ? t.result : null
+function Csr(b) {
+  var a = { csrInfo: null }
+  tcu.isObj(b) ? (a.csrInfo = b) : TCACErr.throwErr(ERRMAP.CSR_INIT_ERROR_TYPE),
+    (this.subject = function () {
+      return a.csrInfo.subject.winDN
+    }),
+    (this.toBase64 = function () {
+      return a.csrInfo.b64
+    })
+}
+function Pkcs7(f) {
+  var d,
+    b = { pkcs7Info: null }
+  if (!tcu.isStr(f)) {
+    return TCACErr.throwErr(ERRMAP.PKCS7_INIT_ERROR_TYPE), null
+  }
+  if (tcu.isFFKyLinFT()) {
+    ;(d = tcu.ffKylinFT.parseP7(f)).pkcs7Info = d
+  } else {
+    var a =
+        '{"inType" : ' +
+        (TCA.IO.MSG | TCA.IO.B64) +
+        ', "inParam" : "' +
+        f +
+        '", "certs" : true, "content" : true, "b64" : false}',
+      c = TCACore.getInstance()
+    try {
+      d = c.call('Pkcs7/parsePkcs7', a)
+    } catch (f) {
+      return TCACErr.throwErr(f, ERRMAP.LIST_CERT_ERROR), null
+    }
+  }
+  ;(b.pkcs7Info = d.pkcs7Info),
+    (b.pkcs7Info.b64 = f),
+    (this.verifyMessage = function (l) {
+      var j,
+        e = TCA.VERIFYOPT.CERT_IN_P7,
+        i = TCA.IO.MSG | TCA.IO.U8
+      j = null != l ? ((e |= TCA.VERIFYOPT.CONTEXT_IN_INPUT), l) : ((e |= TCA.VERIFYOPT.CONTEXT_IN_P7), 'noSet')
+      var h,
+        g = TCA.IO.MSG | TCA.IO.B64,
+        k = b.pkcs7Info.b64
+      return tcu.isFFKyLinFT()
+        ? (h = tcu.ffKylinFT.verify('', i, j, g, k, !1, e, 1, !1)).verifyResult
+          ? new Certificate(h.resultCert)
+          : null
+        : null === (h = tcu.verify('', !1, !0, 1, e, g, k, i, j))
+        ? null
+        : h.verifyResult
+        ? new Certificate(h.b64Cert)
+        : null
+    }),
+    (this.decryptMessage = function () {
+      var i,
+        h = TCA.IO.MSG | TCA.IO.B64,
+        e = b.pkcs7Info.b64,
+        g = TCA.IO.MSG | TCA.IO.U8
+      return tcu.isFFKyLinFT()
+        ? (i = tcu.ffKylinFT.dec(!0, h, e, g, 'noSet', '')).result
+        : null != (i = tcu.dec(['MY', 'Address'], [], !0, h, e, g, 'noSet'))
+        ? i.result
+        : null
+    }),
+    (this.contentMessage = function () {
+      return b.pkcs7Info.isSigned && b.pkcs7Info.hasContent ? b.pkcs7Info.content : null
+    }),
+    (this.verify = this.verifyMessage),
+    (this.toBase64 = function () {
+      return b.pkcs7Info.b64
+    })
+}
+;(CryptoUtil.random = function (b) {
+  var a = tcu.random(b)
+  return null != a ? a.result : null
 }),
-  (CryptoUtil.symmEnc = function (r, t, e, n) {
-    var i = TCA.IO.FILE | TCA.IO.BIN,
-      c = n,
-      a = TCA.IO.MSG | TCA.IO.B64,
-      s = 'noSet'
-    e = tcu.tcaAlg2SDKAlg(e)
-    var o = tcu.symm(r, t, e, !0, i, c, a, s)
-    return o != null ? o.result : null
-  }),
-  (CryptoUtil.symmEncFile2File = function (r, t, e, n, i) {
-    var c = TCA.IO.FILE | TCA.IO.BIN,
-      a = n,
-      s = TCA.IO.FILE | TCA.IO.BIN,
-      o = i
-    e = tcu.tcaAlg2SDKAlg(e)
-    var A = tcu.symm(r, t, e, !0, c, a, s, o)
-    return A != null
-  }),
-  (CryptoUtil.symmDec = function (r, t, e, n, i) {
-    var c = TCA.IO.MSG | TCA.IO.B64,
-      a = n,
-      s = TCA.IO.FILE | TCA.IO.BIN,
-      o = i
-    e = tcu.tcaAlg2SDKAlg(e)
-    var A = tcu.symm(r, t, e, !1, c, a, s, o)
-    return A != null ? A.result : null
-  }),
-  (CryptoUtil.symmDecFile2File = function (r, t, e, n, i) {
-    var c = TCA.IO.FILE | TCA.IO.BIN,
-      a = n,
-      s = TCA.IO.FILE | TCA.IO.BIN,
-      o = i
-    e = tcu.tcaAlg2SDKAlg(e)
-    var A = tcu.symm(r, t, e, !1, c, a, s, o)
-    return A != null
-  }),
-  (Pkcs7.verifyFile = function (r, t, e, n) {
-    var i,
-      c = '',
-      a = TCA.VERIFYOPT.CERT_IN_P7,
-      s = TCA.IO.FILE | TCA.IO.BIN
-    void 0 != t ? ((a |= TCA.VERIFYOPT.CONTEXT_IN_INPUT), (i = t)) : ((a |= TCA.VERIFYOPT.CONTEXT_IN_P7), (i = 'noSet'))
-    var o = TCA.IO.FILE | TCA.IO.BIN,
-      A = r,
-      u = tcu.verify(c, !1, !0, 1, a, o, A, s, i)
-    return u === null ? null : u.verifyResult ? new Certificate(u.b64Cert) : null
-  }),
-  (Pkcs7.verifyFileEx = function (r, t, e, n) {
-    var i = '',
-      c = TCA.VERIFYOPT.CERT_IN_P7 | TCA.VERIFYOPT.CONTEXT_IN_INPUT,
-      a = TCA.IO.FILE | TCA.IO.BIN,
-      s = t,
-      o = TCA.IO.MSG | TCA.IO.B64,
-      A = r,
-      u = tcu.verify(i, !1, !0, 1, c, o, A, a, s)
-    return u === null ? null : u.verifyResult ? new Certificate(u.b64Cert) : null
+  (CryptoUtil.symmEnc = function (l, j, b, k) {
+    var h = TCA.IO.FILE | TCA.IO.BIN,
+      g = k,
+      d = TCA.IO.MSG | TCA.IO.B64
+    b = tcu.tcaAlg2SDKAlg(b)
+    var f = tcu.symm(l, j, b, !0, h, g, d, 'noSet')
+    return null != f ? f.result : null
   }),
-  (Pkcs7.contentFile = function (r, t, e) {
+  (CryptoUtil.symmEncFile2File = function (b, l, h, f, g) {
+    var j = TCA.IO.FILE | TCA.IO.BIN,
+      k = f,
+      d = TCA.IO.FILE | TCA.IO.BIN,
+      m = g
+    return (h = tcu.tcaAlg2SDKAlg(h)), null != tcu.symm(b, l, h, !0, j, k, d, m)
+  }),
+  (CryptoUtil.symmDec = function (m, k, f, b, d) {
+    var g = TCA.IO.MSG | TCA.IO.B64,
+      h = b,
+      p = TCA.IO.FILE | TCA.IO.BIN,
+      l = d
+    f = tcu.tcaAlg2SDKAlg(f)
+    var j = tcu.symm(m, k, f, !1, g, h, p, l)
+    return null != j ? j.result : null
+  }),
+  (CryptoUtil.symmDecFile2File = function (b, l, h, f, g) {
+    var j = TCA.IO.FILE | TCA.IO.BIN,
+      k = f,
+      d = TCA.IO.FILE | TCA.IO.BIN,
+      m = g
+    return (h = tcu.tcaAlg2SDKAlg(h)), null != tcu.symm(b, l, h, !1, j, k, d, m)
+  }),
+  (Pkcs7.verifyFile = function (m, k, f, b) {
+    var d,
+      g = TCA.VERIFYOPT.CERT_IN_P7,
+      h = TCA.IO.FILE | TCA.IO.BIN
+    d = null != k ? ((g |= TCA.VERIFYOPT.CONTEXT_IN_INPUT), k) : ((g |= TCA.VERIFYOPT.CONTEXT_IN_P7), 'noSet')
+    var p = TCA.IO.FILE | TCA.IO.BIN,
+      l = m,
+      j = tcu.verify('', !1, !0, 1, g, p, l, h, d)
+    return tcu.isFFKyLinFT()
+      ? (j = tcu.ffKylinFT.verify('', h, d, p, l, !1, g, 1, !1)).verifyResult
+        ? new Certificate(j.resultCert)
+        : null
+      : null === j
+      ? null
+      : j.verifyResult
+      ? new Certificate(j.b64Cert)
+      : null
+  }),
+  (Pkcs7.verifyFileEx = function (m, k, f, b) {
+    var d,
+      g = TCA.VERIFYOPT.CERT_IN_P7 | TCA.VERIFYOPT.CONTEXT_IN_INPUT,
+      h = TCA.IO.FILE | TCA.IO.BIN,
+      p = k,
+      l = TCA.IO.MSG | TCA.IO.B64,
+      j = m
+    return tcu.isFFKyLinFT()
+      ? (d = tcu.ffKylinFT.verify('', h, p, l, j, !1, g, 1, !1)).verifyResult
+        ? new Certificate(d.resultCert)
+        : null
+      : null === (d = tcu.verify('', !1, !0, 1, g, l, j, h, p))
+      ? null
+      : d.verifyResult
+      ? new Certificate(d.b64Cert)
+      : null
+  }),
+  (Pkcs7.contentFile = function (c, b, a) {
     return TCACErr.throwErr(ERRMAP.UNIMPLEMENTED), null
   }),
-  (Pkcs7.decryptFile = function (r, t, e) {
-    e = void 0 === e ? TCA.IO.BIN : e
-    var n = ['MY', 'Address'],
-      i = [''],
-      c = TCA.IO.FILE | e,
-      a = r,
-      s = TCA.IO.FILE | e,
-      o = t,
-      A = tcu.dec(n, i, !0, c, a, s, o)
-    return A != null
+  (Pkcs7.decryptFile = function (f, b, g) {
+    g = void 0 === g ? TCA.IO.BIN : g
+    var k = TCA.IO.FILE | g,
+      j = f,
+      h = TCA.IO.FILE | g,
+      d = b
+    return null != tcu.dec(['MY', 'Address'], [''], !0, k, j, h, d)
   })
-var TCA = {}
-;(TCA.config = function (r) {
-  TCACore.getInstance(r)
-}),
-  (TCA.GetJSVersion = function () {
-    return '3.7.5'
-  }),
-  (TCA.GetClientVersion = function () {
-    return TCACore.getInstance().GetClientVersion()
-  }),
-  (TCA.SM1 = 'SM1'),
-  (TCA.SM4 = 'SM4'),
-  (TCA.DES = 'DES'),
-  (TCA.DES3 = '3DES'),
-  (TCA.AES = 'AES'),
-  (TCA.RC4 = 'RC4'),
-  (TCA.SM2 = 'SM2'),
-  (TCA.RSA1024 = 'RSA1024'),
-  (TCA.RSA2048 = 'RSA2048'),
-  (TCA.SHA256 = 'SHA256'),
-  (TCA.SHA1 = 'SHA1'),
-  (TCA.SM3 = 'SM3'),
-  (TCA.MD5 = 'MD5'),
-  (TCA.digitalSignature = 128),
-  (TCA.nonRepudiation = 64),
-  (TCA.keyEncipherment = 32),
-  (TCA.dataEncipherment = 16),
-  (TCA.keyAgreement = 8),
-  (TCA.keyCertSign = 4),
-  (TCA.cRLSign = 2),
-  (TCA.encipherOnly = 1),
-  (TCA.decipherOnly = 32768),
-  (TCA.contentCommitment = 64),
-  (TCA.serverAuth = '1.3.6.1.5.5.7.3.1'),
-  (TCA.clientAuth = '1.3.6.1.5.5.7.3.2'),
-  (TCA.codeSigning = '1.3.6.1.5.5.7.3.3'),
-  (TCA.emailProtection = '1.3.6.1.5.5.7.3.4'),
-  (TCA.ipsecEndSystem = '1.3.6.1.5.5.7.3.5'),
-  (TCA.ipsecTunnel = '1.3.6.1.5.5.7.3.6'),
-  (TCA.ipsecUser = '1.3.6.1.5.5.7.3.7'),
-  (TCA.timeStamping = '1.3.6.1.5.5.7.3.8'),
-  (TCA.OCSPSigning = '1.3.6.1.5.5.7.3.9'),
-  (TCA.dvcs = '1.3.6.1.5.5.7.3.10'),
-  (TCA.sbgpCertAAServerAuth = '1.3.6.1.5.5.7.3.11'),
-  (TCA.scvpResponder = '1.3.6.1.5.5.7.3.12'),
-  (TCA.eapOverPPP = '1.3.6.1.5.5.7.3.13'),
-  (TCA.eapOverLAN = '1.3.6.1.5.5.7.3.14'),
-  (TCA.scvpServer = '1.3.6.1.5.5.7.3.15'),
-  (TCA.scvpClient = '1.3.6.1.5.5.7.3.16'),
-  (TCA.ipsecIKE = '1.3.6.1.5.5.7.3.17'),
-  (TCA.capwapAC = '1.3.6.1.5.5.7.3.18'),
-  (TCA.capwapWTP = '1.3.6.1.5.5.7.3.19'),
-  (TCA.smartcardlogon = '1.3.6.1.4.1.311.20.2.2'),
-  (TCA.EX = {}),
-  (TCA.EX.szOID_RSA_MD5RSA = '1.2.840.113549.1.1.4'),
+var TCA = {
+  config: function (a) {
+    TCACore.getInstance(a)
+  },
+  SM1: 'SM1',
+  SM4: 'SM4',
+  DES: 'DES',
+  DES3: '3DES',
+  AES: 'AES',
+  RC4: 'RC4',
+  SM2: 'SM2',
+  RSA1024: 'RSA1024',
+  RSA2048: 'RSA2048',
+  SHA256: 'SHA256',
+  SHA1: 'SHA1',
+  SM3: 'SM3',
+  MD5: 'MD5',
+  digitalSignature: 128,
+  nonRepudiation: 64,
+  keyEncipherment: 32,
+  dataEncipherment: 16,
+  keyAgreement: 8,
+  keyCertSign: 4,
+  cRLSign: 2,
+  encipherOnly: 1,
+  decipherOnly: 32768,
+  contentCommitment: 64,
+  serverAuth: '1.3.6.1.5.5.7.3.1',
+  clientAuth: '1.3.6.1.5.5.7.3.2',
+  codeSigning: '1.3.6.1.5.5.7.3.3',
+  emailProtection: '1.3.6.1.5.5.7.3.4',
+  ipsecEndSystem: '1.3.6.1.5.5.7.3.5',
+  ipsecTunnel: '1.3.6.1.5.5.7.3.6',
+  ipsecUser: '1.3.6.1.5.5.7.3.7',
+  timeStamping: '1.3.6.1.5.5.7.3.8',
+  OCSPSigning: '1.3.6.1.5.5.7.3.9',
+  dvcs: '1.3.6.1.5.5.7.3.10',
+  sbgpCertAAServerAuth: '1.3.6.1.5.5.7.3.11',
+  scvpResponder: '1.3.6.1.5.5.7.3.12',
+  eapOverPPP: '1.3.6.1.5.5.7.3.13',
+  eapOverLAN: '1.3.6.1.5.5.7.3.14',
+  scvpServer: '1.3.6.1.5.5.7.3.15',
+  scvpClient: '1.3.6.1.5.5.7.3.16',
+  ipsecIKE: '1.3.6.1.5.5.7.3.17',
+  capwapAC: '1.3.6.1.5.5.7.3.18',
+  capwapWTP: '1.3.6.1.5.5.7.3.19',
+  smartcardlogon: '1.3.6.1.4.1.311.20.2.2',
+  EX: {}
+}
+;(TCA.EX.szOID_RSA_MD5RSA = '1.2.840.113549.1.1.4'),
   (TCA.EX.szOID_RSA_SHA1RSA = '1.2.840.113549.1.1.5'),
   (TCA.EX.szOID_SM2_SM3SM2 = '1.2.156.10197.1.501'),
   (TCA.EX.INPUT_BASE64 = 1),
@@ -810,67 +1199,74 @@ var TCA = {}
     '1.3.6.1.5.5.7.3.19': 'capwapWTP',
     '1.3.6.1.4.1.311.20.2.2': 'smartcardlogon'
   }),
-  (TCA.filter2Str = function (r) {
-    for (var t = '', e = 0; e < r.length; e++) {
-      var n = r[e],
-        i = ''
-      for (var c in n) i += n[c] + '|'
-      t += i
+  (TCA.filter2Str = function (a) {
+    for (var h = '', b = 0; b < a.length; b++) {
+      var f = a[b],
+        g = ''
+      for (var d in f) {
+        g += f[d] + '|'
+      }
+      h += g
     }
-    return t
+    return h
   }),
-  (TCA.doFileDialog = function (r, t, e, n) {
-    function i(r) {
-      var t = r.result != ''
-      e(t, r.result)
-    }
-    e == null && TCACErr.throwErr(ERRMAP.ERROR_NULL_CALLBACK),
-      (t !== null && tcu.isArr(t)) || (t = [{ typeTxt: 'All(*.*)', typeExt: '*.*' }])
-    var c = TCA.filter2Str(t),
-      a = { isOpen: n, title: r, filter: c }
-    a = tcu.json2Str(a)
-    var s = TCACore.getInstance()
+  (TCA.doFileDialog = function (a, h, b, f) {
+    null == b && TCACErr.throwErr(ERRMAP.ERROR_NULL_CALLBACK),
+      (null !== h && tcu.isArr(h)) || (h = [{ typeTxt: 'All(*.*)', typeExt: '*.*' }])
+    var g = { isOpen: f, title: a, filter: TCA.filter2Str(h) }
+    g = tcu.json2Str(g)
+    var d = TCACore.getInstance()
     try {
-      s.callAsyn('FileUtil/SelFile', a, i)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.ERROR_FILE_DIALOG), null
+      d.callAsyn('FileUtil/SelFile', g, function (e) {
+        var c = '' != e.result
+        b(c, e.result)
+      })
+    } catch (a) {
+      return TCACErr.throwErr(a, ERRMAP.ERROR_FILE_DIALOG), null
     }
   }),
-  (TCA.showOpenDialog = function (r, t, e) {
-    ;(r !== null && r !== '') || (r = '打开'), TCA.doFileDialog(r, t, e, !0)
+  (TCA.showOpenDialog = function (c, b, a) {
+    ;(null !== c && '' !== c) || (c = '打开'), TCA.doFileDialog(c, b, a, !0)
   }),
-  (TCA.showSaveDialog = function (r, t, e) {
-    ;(r !== null && r !== '') || (r = '关闭'), TCA.doFileDialog(r, t, e, !1)
+  (TCA.showSaveDialog = function (c, b, a) {
+    ;(null !== c && '' !== c) || (c = '关闭'), TCA.doFileDialog(c, b, a, !1)
   })
 var TCACore = (function () {
+  var priData = {}
   function saveConfig(r) {
-    ;(priData.config = {}),
-      (priData.config.ajaxHdl = void 0 !== r.ajaxHdl ? r.ajaxHdl : tcu.ajax),
-      (priData.config.str2JsonHdl = void 0 !== r.str2JsonHdl ? r.str2JsonHdl : tcu.convStr2Json),
-      (priData.config.certkitClsID = '40CAB063-EF31-4ff6-B512-E1E4E454EB19'),
-      (priData.config.certKitSrvHost = '127.0.0.1'),
-      (priData.config.certKitSrvPort = '9655'),
+    function t() {
+      return 0 < window.navigator.userAgent.indexOf('Linux')
+    }
+    for (var e in ((priData.config = {}),
+    (priData.config.ajaxHdl = void 0 !== r.ajaxHdl ? r.ajaxHdl : tcu.ajax),
+    (priData.config.str2JsonHdl = void 0 !== r.str2JsonHdl ? r.str2JsonHdl : tcu.convStr2Json),
+    (priData.config.certkitClsID = '40CAB063-EF31-4ff6-B512-E1E4E454EB19'),
+    (priData.config.certKitSrvHost = '127.0.0.1'),
+    (priData.config.certKitSrvPort = t() ? '19657' : '9655'),
+    (priData.config.certKitSrvUrl =
+      'https://' + priData.config.certKitSrvHost + ':' + priData.config.certKitSrvPort + '/'),
+    t() &&
       (priData.config.certKitSrvUrl =
-        'https://' + priData.config.certKitSrvHost + ':' + priData.config.certKitSrvPort + '/'),
-      (priData.config.certKitSrvVer = '3.6.0.2'),
-      (priData.config.certKitActiveXVer = '3.7.3.0'),
-      (priData.config.licver = '3.6.0.2'),
-      (priData.config.licsoftver = '3.6.0.2'),
-      (priData.config.selfNameFmt = 'TopCertKit-\\d+(\\.\\d+)*.js'),
-      (priData.config.selfPath = getSelfPath()),
-      (priData.config.useAlias = void 0 === r.useAlias || r.useAlias),
-      (priData.config.disableExeUrl = void 0 !== r.disableExeUrl && r.disableExeUrl),
-      void 0 !== r.cspAlias
-        ? (priData.config.cspAlias = r.cspAlias)
-        : (priData.config.cspAlias = {
-            RSA软证书: 'Microsoft Enhanced Cryptographic Provider v1.0',
-            '飞天 ePass 3000 GM': 'EnterSafe ePass3000GM CSP v1.0',
-            '华大智宝 SJK102': 'CIDC Cryptographic Service Provider v3.0.0',
-            SM2软证书: 'iTrusChina Cryptographic Service Provider v1.0.0',
-            神州龙芯: 'ChinaCpu USB Key CSP v1.0'
-          }),
-      (priData.config.addCspAlias = void 0 !== r.addCspAlias ? r.addCspAlias : {})
-    for (var t in priData.config.addCspAlias) priData.config.cspAlias[t] = priData.config.addCspAlias[t]
+        'http://' + priData.config.certKitSrvHost + ':' + priData.config.certKitSrvPort + '/'),
+    (priData.config.certKitSrvVer = '3.6.0.2'),
+    (priData.config.certKitActiveXVer = '3.6.0.2'),
+    (priData.config.licver = '3.6.0.2'),
+    (priData.config.licsoftver = '3.6.0.2'),
+    (priData.config.useAlias = void 0 === r.useAlias || r.useAlias),
+    (priData.config.disableExeUrl = void 0 !== r.disableExeUrl && r.disableExeUrl),
+    void 0 !== r.cspAlias
+      ? (priData.config.cspAlias = r.cspAlias)
+      : (priData.config.cspAlias = {
+          RSA软证书: 'Microsoft Enhanced Cryptographic Provider v1.0',
+          '飞天 ePass 3000 GM': 'EnterSafe ePass3000GM CSP v1.0',
+          '华大智宝 SJK102': 'CIDC Cryptographic Service Provider v3.0.0',
+          SM2软证书: 'iTrusChina Cryptographic Service Provider v1.0.0',
+          神州龙芯: 'ChinaCpu USB Key CSP v1.0'
+        }),
+    (priData.config.addCspAlias = void 0 !== r.addCspAlias ? r.addCspAlias : {}),
+    priData.config.addCspAlias)) {
+      priData.config.cspAlias[e] = priData.config.addCspAlias[e]
+    }
     ;(priData.config.disableWhiteList = void 0 !== r.disableWhiteList && r.disableWhiteList),
       void 0 !== r.whiteList
         ? (priData.config.whiteList = r.whiteList)
@@ -879,8 +1275,9 @@ var TCACore = (function () {
             'iTrusChina Cryptographic Service Provider v1.0.0'
           ]),
       (priData.config.addWhiteList = void 0 !== r.addWhiteList ? r.addWhiteList : [])
-    for (var e = 0; e < priData.config.addWhiteList.length; e++)
-      priData.config.whiteList.push(priData.config.addWhiteList[e])
+    for (var n = 0; n < priData.config.addWhiteList.length; n++) {
+      priData.config.whiteList.push(priData.config.addWhiteList[n])
+    }
     ;(priData.config.lic = void 0 !== r.license ? r.license : null),
       (priData.config.licinfo = null),
       (priData.config.urlArr = null),
@@ -891,37 +1288,29 @@ var TCACore = (function () {
         ? (priData.config.exepath = priData.config.selfPath + 'TopCertKit-' + priData.config.exeVer + '.exe')
         : (priData.config.exepath = r.exepath),
       (priData.config.genKeySpec = void 0 !== r.genKeySpec ? r.genKeySpec : 1),
-      priData.config.genKeySpec != 1 && priData.config.genKeySpec != 2 && (priData.config.genKeySpec = 1),
+      1 != priData.config.genKeySpec && 2 != priData.config.genKeySpec && (priData.config.genKeySpec = 1),
       (priData.config.genCsrUseSHA256 = void 0 !== r.genCsrUseSHA256 && r.genCsrUseSHA256),
       (priData.config.signPkcs7WithAttr = void 0 !== r.signPkcs7WithAttr && r.signPkcs7WithAttr),
       (priData.config.enableAutoAuth = void 0 !== r.enableAutoAuth && r.enableAutoAuth),
       (priData.config.autoAuthUrl = void 0 !== r.autoAuthUrl ? r.autoAuthUrl : '')
   }
-  function getSelfPath() {
-    for (var r, t = document.getElementsByTagName('script'), e = new RegExp('(.*/)+'), n = 0; n < t.length; n++)
-      if (((r = t[n].getAttribute('src')), r !== null && !(r.search('TopCertKit-\\d{5}.js') < 0))) {
-        r = r.match(e)[0]
-        break
-      }
-    return r
-  }
   function doGetEnct() {
-    var r,
-      t = '{"method" : "gen","param1" : "", "param2" : "", "param3" : ""}',
-      e = TCACore.getInstance()
+    var r = TCACore.getInstance()
     try {
-      r = e.call('token/token', t)
+      resppriData.config.signPkcs7WithAttr = r.call(
+        'token/token',
+        '{"method" : "gen","param1" : "", "param2" : "", "param3" : ""}'
+      )
     } catch (r) {
       return TCACErr.throwErr(r, ERRMAP.AUTOAUTH_ERROR_2), null
     }
-    return r.retStr1
+    return (void 0).retStr1
   }
   function doVerifyToken(r, t) {
-    var e,
-      n = '{"method" : "verify","param1" : "' + r + '", "param2" : "' + t + '", "param3" : ""}',
-      i = TCACore.getInstance()
+    var e = '{"method" : "verify","param1" : "' + r + '", "param2" : "' + t + '", "param3" : ""}',
+      n = TCACore.getInstance()
     try {
-      e = i.call('token/token', n)
+      n.call('token/token', e)
     } catch (r) {
       return TCACErr.throwErr(r, ERRMAP.AUTOAUTH_ERROR_2), !1
     }
@@ -929,7 +1318,7 @@ var TCACore = (function () {
   }
   function verifyAutoAuth() {
     var r = priData.config.autoAuthUrl
-    ;(r !== '' && void 0 !== r && r !== null) || TCACErr.throwErr(ERRMAP.INVALID_CONFIG)
+    ;('' !== r && null != r) || TCACErr.throwErr(ERRMAP.INVALID_CONFIG)
     var t = doGetEnct(),
       e = "d={'winterIsComing': \"" + t + '", \'v\' : "1"}'
     $.ajax({
@@ -950,29 +1339,29 @@ var TCACore = (function () {
   function verifyLicense() {
     var pkcs7 = new Pkcs7(priData.config.lic),
       cert = pkcs7.verifyMessage()
-    cert.serialNumber() != '5F259CDACC82BB7EF305B3007B8B8EC9BDF9B5F2' && TCACErr.throwErr(ERRMAP.INVALID_LICENSE_2)
+    '5F259CDACC82BB7EF305B3007B8B8EC9BDF9B5F2' != cert.serialNumber() && TCACErr.throwErr(ERRMAP.INVALID_LICENSE_2)
     var info = pkcs7.contentMessage()
     priData.config.licinfo = eval('(' + info + ')')
   }
   function gotoExeUrl() {
-    if (priData.config.disableExeUrl) throw TCACErr.throwErr(ERRMAP.INSTALL_ACTIVEX_ERR)
+    if (priData.config.disableExeUrl) {
+      throw TCACErr.throwErr(ERRMAP.INSTALL_ACTIVEX_ERR)
+    }
     window.location = priData.config.exepath
   }
   function loadCertKitSrv() {
     return !0
   }
   function getSrvVersion() {
-    var r = tcu.getSrvVersion()
-    return r.version
+    return !!tcu.isFFKyLinFT() || tcu.getSrvVersion().version
   }
   function loadCertKitActiveX() {
     try {
       var r = "<object id='TopCertKit' classid='clsid:" + priData.config.certkitClsID + "' "
       r += '></object>'
       var t = document.getElementById('CertKitDiv')
-      ;(t !== null && t !== '') ||
-        ((t = document.createElement('div')),
-        t.setAttribute('id', 'CertKitDiv'),
+      ;(null !== t && '' !== t) ||
+        ((t = document.createElement('div')).setAttribute('id', 'CertKitDiv'),
         (t.innerHTML = r),
         document.body.appendChild(t)),
         (priData.certKitSrvActiveX = document.getElementById('TopCertKit'))
@@ -981,20 +1370,20 @@ var TCACore = (function () {
     }
   }
   function checkCertKitVer() {
-    var r
-    r = isIE() ? priData.certKitSrvActiveX.ver : getSrvVersion()
-    var t = r.split('.'),
-      e = priData.config.certKitActiveXVer.split('.'),
-      n = 1e4 * parseInt(t[0]) + 100 * parseInt(t[1]) + parseInt(t[2]),
-      i = 1e4 * parseInt(e[0]) + 100 * parseInt(e[1]) + parseInt(e[2])
-    return !(n < i) || (TCACErr.throwErr(ERRMAP.INVALID_CERTKIT_VER), !1)
-  }
-  function doGetClientVersion() {
-    return isIE() ? priData.certKitSrvActiveX.ver : getSrvVersion()
+    if (tcu.isFFKyLinFT()) {
+      return !0
+    }
+    var r = (isIE() ? priData.certKitSrvActiveX.ver : getSrvVersion()).split('.'),
+      e = priData.config.certKitActiveXVer.split('.')
+    return !(
+      10000 * parseInt(r[0]) + 100 * parseInt(r[1]) + parseInt(r[2]) <
+        10000 * parseInt(e[0]) + 100 * parseInt(e[1]) + parseInt(e[2]) &&
+      (TCACErr.throwErr(ERRMAP.INVALID_CERTKIT_VER), 1)
+    )
   }
   function isIE() {
     var r = navigator.userAgent
-    return r.indexOf('MSIE') > 0 || r.toLocaleLowerCase().indexOf('trident') > -1
+    return 0 < r.indexOf('MSIE') || -1 < r.toLocaleLowerCase().indexOf('trident')
   }
   function loadCertKit() {
     return isIE() ? loadCertKitActiveX() : loadCertKitSrv()
@@ -1002,13 +1391,7 @@ var TCACore = (function () {
   function callSrv(r, t) {
     var e = priData.config.certKitSrvUrl + r,
       n = {},
-      i = !1,
-      c = function (r) {
-        ;(i = !0), (n = r)
-      },
-      a = function (r, t, e) {
-        ;(i = !1), (n.request = r), (n.status = t), (n.err = e)
-      }
+      i = !1
     if (
       (priData.config.ajaxHdl({
         type: 'POST',
@@ -1017,13 +1400,19 @@ var TCACore = (function () {
         contentType: 'application/json; charset=utf-8',
         dataType: 'json',
         data: t,
-        success: c,
-        error: a
+        success: function (r) {
+          ;(i = !0), (n = r)
+        },
+        error: function (r, t, e) {
+          ;(i = !1), (n.request = r), (n.status = t), (n.err = e)
+        }
       }),
       !i)
     ) {
-      var s = '[' + n.request.readyState + '][' + n.request.status + '][' + n.status + '][' + n.err.toString() + ']'
-      throw new TCACErr(4278190081, s)
+      throw new TCACErr(
+        4278190081,
+        '[' + n.request.readyState + '][' + n.request.status + '][' + n.status + '][' + n.err.toString() + ']'
+      )
     }
     return (
       n.retCode != ERRMAP.SUPER_SUCCESS.code &&
@@ -1033,18 +1422,7 @@ var TCACore = (function () {
   }
   function callSrvAsyn(r, t, e) {
     var n = priData.config.certKitSrvUrl + r,
-      i = {},
-      c = !1,
-      a = function (r) {
-        ;(c = !0), (i = r), e(r)
-      },
-      s = function (r, t, e) {
-        TCACErr.throwErr(TCACErr.newErr(ERRMAP.CALL_HTTP_CLIENT_ERR), { code: i.retCode, msg: i.retMsg }),
-          (c = !1),
-          (i.request = r),
-          (i.status = t),
-          (i.err = e)
-      }
+      i = {}
     priData.config.ajaxHdl({
       type: 'POST',
       url: n,
@@ -1052,8 +1430,16 @@ var TCACore = (function () {
       contentType: 'application/json; charset=utf-8',
       dataType: 'json',
       data: t,
-      success: a,
-      error: s
+      success: function (r) {
+        !0, e((i = r))
+      },
+      error: function (r, t, e) {
+        TCACErr.throwErr(TCACErr.newErr(ERRMAP.CALL_HTTP_CLIENT_ERR), { code: i.retCode, msg: i.retMsg }),
+          !1,
+          (i.request = r),
+          (i.status = t),
+          (i.err = e)
+      }
     })
   }
   function callActiveX(r, t) {
@@ -1064,11 +1450,11 @@ var TCACore = (function () {
       var n = TCACErr.newErr({ code: r.number, msg: r.description })
       return TCACErr.throwErr(n, ERRMAP.CALL_ACTIVEX_ERR), null
     }
-    if (((e = priData.config.str2JsonHdl(e)), e.retCode != 0)) {
-      var i = TCACErr.newErr(ERRMAP.CALL_ACTIVEX_ERR_METHOD)
-      return TCACErr.throwErr(i, { code: e.retCode, msg: e.retMsg }), null
+    if (0 == (e = priData.config.str2JsonHdl(e)).retCode) {
+      return e
     }
-    return e
+    var i = TCACErr.newErr(ERRMAP.CALL_ACTIVEX_ERR_METHOD)
+    return TCACErr.throwErr(i, { code: e.retCode, msg: e.retMsg }), null
   }
   function callActiveXAsyn(r, t, e) {
     var n = null
@@ -1078,13 +1464,12 @@ var TCACore = (function () {
       var i = TCACErr.newErr({ code: r.number, msg: r.description })
       return TCACErr.throwErr(i, ERRMAP.CALL_ACTIVEX_ERR), null
     }
-    if (((n = priData.config.str2JsonHdl(n)), n.retCode != 0)) {
+    if (0 != (n = priData.config.str2JsonHdl(n)).retCode) {
       var c = TCACErr.newErr(ERRMAP.CALL_ACTIVEX_ERR_METHOD)
       return TCACErr.throwErr(c, { code: n.retCode, msg: n.retMsg }), null
     }
     e(n)
   }
-  var priData = {}
   ;(priData.config = null), (priData.cacheKeyStoreList = null), (priData.certKitSrvActiveX = null), saveConfig({})
   var instanceClass = function () {
       ;(this.getCfg = function (r) {
@@ -1094,11 +1479,14 @@ var TCACore = (function () {
           priData.cacheKeyStoreList = r
         }),
         (this.getLicInfo = function (r) {
-          return priData.config.licinfo == null, priData.config.licinfo[r]
+          return priData.config.licinfo, priData.config.licinfo[r]
         }),
         (this.full2Alias = function (r) {
-          for (var t in priData.config.cspAlias)
-            if (priData.config.cspAlias.hasOwnProperty(t) && priData.config.cspAlias[t] == r) return t
+          for (var t in priData.config.cspAlias) {
+            if (priData.config.cspAlias.hasOwnProperty(t) && priData.config.cspAlias[t] == r) {
+              return t
+            }
+          }
           return r
         }),
         (this.alias2Full = function (r) {
@@ -1106,42 +1494,58 @@ var TCACore = (function () {
           return void 0 === t ? r : t
         }),
         (this.certInLic = function (r) {
-          var t = new RegExp(this.getLicInfo('Issuer'))
-          return t.test(r.issuer())
+          return new RegExp(this.getLicInfo('Issuer')).test(r.issuer())
         })
-      var r = {}
-      ;(r.query = isIE() ? callActiveX : callSrv),
-        (r.queryAsyn = isIE() ? callActiveXAsyn : callSrvAsyn),
-        (this.call = function (t, e) {
-          return r.query(t, e)
-        }),
-        (this.callAsyn = function (t, e, n) {
-          return r.queryAsyn(t, e, n)
+      var n = {}
+      ;(n.query = isIE() ? callActiveX : callSrv),
+        (n.queryAsyn = isIE() ? callActiveXAsyn : callSrvAsyn),
+        (this.call = function (r, t) {
+          return n.query(r, t)
         }),
-        (this.GetClientVersion = function () {
-          return doGetClientVersion()
+        (this.callAsyn = function (r, t, e) {
+          return n.queryAsyn(r, t, e)
         })
     },
     _instance = null,
     getInstance = function (r) {
-      if ((void 0 !== r && r !== null && saveConfig(r), _instance === null)) {
-        if (((_instance = new instanceClass()), loadCertKit(), !checkCertKitVer())) return void gotoExeUrl()
+      if ((null != r && saveConfig(r), null === _instance)) {
+        if (((_instance = new instanceClass()), loadCertKit(), !checkCertKitVer())) {
+          return void gotoExeUrl()
+        }
         priData.config.enableAutoAuth ? verifyAutoAuth() : verifyLicense()
       }
       return _instance
     }
   return { getInstance: getInstance }
 })()
-;(TCACErr.newErr = function (r, t) {
-  var e = null
-  return r instanceof TCACErr ? ((e = new TCACErr(r)), e.addErr(t)) : ((e = new TCACErr()), e.addErr(r)), e
+function TCACErr(a) {
+  ;(this._errarr = []),
+    a instanceof TCACErr && (this._errarr = a._errarr),
+    (this.addErr = function (c) {
+      var b = c.code,
+        d = c.msg
+      ;(this.number = 0 < b ? b : 4294967296 + b),
+        (this.description = d),
+        this._errarr.push({ code: this.number.toString(16).toUpperCase(), msg: d })
+    }),
+    (this.toStr = function () {
+      for (var c = '', b = 0; b < this._errarr.length; b++) {
+        c += this._errarr[b].msg + ', 错误码：0x' + this._errarr[b].code + ', \r\n'
+      }
+      return c.substr(0, c.length - 4)
+    })
+}
+;(TCACErr.newErr = function (c, b) {
+  var a = null
+  return c instanceof TCACErr ? (a = new TCACErr(c)).addErr(b) : (a = new TCACErr()).addErr(c), a
 }),
-  (TCACErr.throwErr = function (r, t) {
-    throw r instanceof TCACErr ? TCACErr.newErr(r, t) : TCACErr.newErr(r)
+  (TCACErr.throwErr = function (b, a) {
+    throw b instanceof TCACErr ? TCACErr.newErr(b, a) : TCACErr.newErr(b)
   })
 var ERRMAP_ZHCN = {
     CERTSTORE_INIT_WRONGTYPE: { code: 16777217, msg: 'CertStore实例初始化失败，参数类型不匹配' },
     LIST_STORE_ERROR: { code: 16777218, msg: '列举密钥库错误' },
+    CLEAR_PIN_CACHE_ERROR: { code: 556466177, msg: '清除pin码缓存错误' },
     BY_CERT_ERR_TYPE: { code: 16777219, msg: '根据证书获取CertStore实例时失败，参数类型不匹配' },
     LIST_CERT_ERROR: { code: 16777220, msg: '列举证书错误' },
     GEN_CSR_ERROR_PARAMS: { code: 16777221, msg: '产生CSR失败，输入参数错误' },
@@ -1150,6 +1554,8 @@ var ERRMAP_ZHCN = {
     INSTALL_CERT_ERR_PARAMS: { code: 16777224, msg: '安装证书失败，输入参数错误' },
     INSTALL_CERT_ERR_UNKNOWN_SYMMALG: { code: 16777225, msg: '安装加密证书失败，未知的对称加密算法' },
     INSTALL_CERT_ERR: { code: 16777226, msg: '安装证书失败' },
+    VERIFY_PIN_ERROR: { code: 16777227, msg: '验证pin码错误' },
+    GET_DEVINFO_ERROR: { code: 16777228, msg: '获取设备信息错误' },
     CERTIFICATE_INIT_WRONGTYPE: { code: 33554433, msg: 'Certificate实例初始化失败，参数类型不匹配' },
     CERTIFICATE_PARSE_ERROR: { code: 33554434, msg: '从Base64解析证书失败' },
     CERTIFICATE_DELETE_ERROR: { code: 33554435, msg: '删除证书失败' },
@@ -1162,7 +1568,6 @@ var ERRMAP_ZHCN = {
     PKCS7_INIT_PARSE_ERROR: { code: 83886082, msg: '初始化Pkcs7实例失败，解析Pkcs7数据失败' },
     SIGN_ERROR: { code: 2684354561, msg: '签名操作失败' },
     SIGN_ERROR_HASH_ALG: { code: 100663297, msg: '哈希算法与签名算法不匹配' },
-    SIGN_INPUT_ERROR: { code: 100663298, msg: '参数错误' },
     VERIFY_ERROR: { code: 2684354562, msg: '验证签名操作失败' },
     ENCRYPT_ERROR: { code: 2684354563, msg: '加密操作失败' },
     DECRYPT_ERROR: { code: 2684354564, msg: '解密操作失败' },
@@ -1185,6 +1590,7 @@ var ERRMAP_ZHCN = {
     SUPER_SUCCESS: { code: 0, msg: '成功' }
   },
   ERRMAP = ERRMAP_ZHCN
+function tcu() {}
 ;(TCACErr.prototype = new Error()),
   (tcu.extKeyUsageMap = {
     '1.3.6.1.5.5.7.3.1': 'serverAuth',
@@ -1208,72 +1614,74 @@ var ERRMAP_ZHCN = {
     '1.3.6.1.5.5.7.3.19': 'capwapWTP',
     '1.3.6.1.4.1.311.20.2.2': 'smartcardlogon'
   }),
-  (tcu.isStr = function (r) {
-    return typeof r === 'string'
-  }),
-  (tcu.isNum = function (r) {
-    return typeof r === 'number'
-  }),
-  (tcu.isBool = function (r) {
-    return typeof r === 'boolean'
-  }),
-  (tcu.isUndef = function (r) {
-    return typeof r === 'undefined'
-  }),
-  (tcu.isNull = function (r) {
-    return typeof r === 'null'
-  }),
-  (tcu.isObj = function (r) {
-    return typeof r === 'object'
-  }),
-  (tcu.isArr = function (r) {
-    return Object.prototype.toString.call(r) === '[object Array]'
-  }),
-  (tcu.urlDec = function (r) {
-    var t = decodeURIComponent(r)
-    return t.replace(/[\r\n]/g, '')
-  }),
-  (tcu.convKeyUsageArr2Num = function (r) {
-    for (var t = 0, e = 0; e < r.length; e++)
-      r[e] != 'digitalSignature'
-        ? r[e] != 'nonRepudiation'
-          ? r[e] != 'keyEncipherment'
-            ? r[e] != 'dataEncipherment'
-              ? r[e] != 'keyAgreement'
-                ? r[e] != 'keyCertSign'
-                  ? r[e] != 'cRLSign'
-                    ? r[e] != 'encipherOnly'
-                      ? r[e] != 'decipherOnly'
-                        ? r[e] == 'contentCommitment' && (t |= TCA.contentCommitment)
-                        : (t |= TCA.decipherOnly)
-                      : (t |= TCA.encipherOnly)
-                    : (t |= TCA.cRLSign)
-                  : (t |= TCA.keyCertSign)
-                : (t |= TCA.keyAgreement)
-              : (t |= TCA.dataEncipherment)
-            : (t |= TCA.keyEncipherment)
-          : (t |= TCA.nonRepudiation)
-        : (t |= TCA.digitalSignature)
-    return t
-  }),
-  (tcu.convKeyUsageNum2Arr = function (r) {
-    var t = []
-    return r === 0
-      ? t
-      : (r & TCA.digitalSignature && t.push('digitalSignature'),
-        r & TCA.nonRepudiation && t.push('nonRepudiation'),
-        r & TCA.keyEncipherment && t.push('keyEncipherment'),
-        r & TCA.dataEncipherment && t.push('dataEncipherment'),
-        r & TCA.keyAgreement && t.push('keyAgreement'),
-        r & TCA.keyCertSign && t.push('keyCertSign'),
-        r & TCA.cRLSign && t.push('cRLSign'),
-        r & TCA.encipherOnly && t.push('encipherOnly'),
-        r & TCA.decipherOnly && t.push('decipherOnly'),
-        r & TCA.contentCommitment && t.push('contentCommitment'),
-        t)
-  }),
-  (tcu.convSignAlg2Str = function (r) {
-    switch (r) {
+  (tcu.isStr = function (a) {
+    return 'string' == typeof a
+  }),
+  (tcu.isNum = function (a) {
+    return 'number' == typeof a
+  }),
+  (tcu.isBool = function (a) {
+    return 'boolean' == typeof a
+  }),
+  (tcu.isUndef = function (a) {
+    return void 0 === a
+  }),
+  (tcu.isNull = function (a) {
+    return 'null' == typeof a
+  }),
+  (tcu.isObj = function (a) {
+    return 'object' == typeof a
+  }),
+  (tcu.isArr = function (a) {
+    return '[object Array]' === Object.prototype.toString.call(a)
+  }),
+  (tcu.urlDec = function (b) {
+    var a = decodeURIComponent(b)
+    return a.replace(/[\r\n]/g, '')
+  }),
+  (tcu.convKeyUsageArr2Num = function (c) {
+    for (var b = 0, a = 0; a < c.length; a++) {
+      'digitalSignature' != c[a]
+        ? 'nonRepudiation' != c[a]
+          ? 'keyEncipherment' != c[a]
+            ? 'dataEncipherment' != c[a]
+              ? 'keyAgreement' != c[a]
+                ? 'keyCertSign' != c[a]
+                  ? 'cRLSign' != c[a]
+                    ? 'encipherOnly' != c[a]
+                      ? 'decipherOnly' != c[a]
+                        ? 'contentCommitment' == c[a] && (b |= TCA.contentCommitment)
+                        : (b |= TCA.decipherOnly)
+                      : (b |= TCA.encipherOnly)
+                    : (b |= TCA.cRLSign)
+                  : (b |= TCA.keyCertSign)
+                : (b |= TCA.keyAgreement)
+              : (b |= TCA.dataEncipherment)
+            : (b |= TCA.keyEncipherment)
+          : (b |= TCA.nonRepudiation)
+        : (b |= TCA.digitalSignature)
+    }
+    return b
+  }),
+  (tcu.convKeyUsageNum2Arr = function (b) {
+    var a = []
+    return (
+      0 === b ||
+        (b & TCA.digitalSignature && a.push('digitalSignature'),
+        b & TCA.nonRepudiation && a.push('nonRepudiation'),
+        b & TCA.keyEncipherment && a.push('keyEncipherment'),
+        b & TCA.dataEncipherment && a.push('dataEncipherment'),
+        b & TCA.keyAgreement && a.push('keyAgreement'),
+        b & TCA.keyCertSign && a.push('keyCertSign'),
+        b & TCA.cRLSign && a.push('cRLSign'),
+        b & TCA.encipherOnly && a.push('encipherOnly'),
+        b & TCA.decipherOnly && a.push('decipherOnly'),
+        b & TCA.contentCommitment && a.push('contentCommitment')),
+      a
+    )
+  }),
+  (tcu.convSignAlg2Str = function (a) {
+    switch (a) {
       case 81:
         return 'SM3WithSM2'
       case 98:
@@ -1281,11 +1689,11 @@ var ERRMAP_ZHCN = {
     }
     return 'UnknownSignAlg'
   }),
-  (tcu.convAlg2SignAlgId = function (r) {
-    return r == TCA.RSA1024 ? 98 : r == TCA.RSA2048 ? 98 : r == TCA.SM2 ? 81 : -1
+  (tcu.convAlg2SignAlgId = function (a) {
+    return a == TCA.RSA1024 ? 98 : a == TCA.RSA2048 ? 98 : a == TCA.SM2 ? 81 : -1
   }),
-  (tcu.convPubKeyAlg2Str = function (r) {
-    switch (r) {
+  (tcu.convPubKeyAlg2Str = function (a) {
+    switch (a) {
       case 1:
       case 2:
       case 3:
@@ -1296,8 +1704,8 @@ var ERRMAP_ZHCN = {
     }
     return 'UnknownAlg'
   }),
-  (tcu.convPubKeyAlg2Size = function (r) {
-    switch (r) {
+  (tcu.convPubKeyAlg2Size = function (a) {
+    switch (a) {
       case 1:
         return 1024
       case 2:
@@ -1309,23 +1717,31 @@ var ERRMAP_ZHCN = {
     }
     return -1
   }),
-  (tcu.convExtKeyUsageOID2Name = function (r) {
-    for (var t = [], e = 0; e < r.length; e++) t.push(tcu.extKeyUsageMap[r[e]])
-    return t
+  (tcu.convExtKeyUsageOID2Name = function (c) {
+    for (var b = [], a = 0; a < c.length; a++) {
+      b.push(tcu.extKeyUsageMap[c[a]])
+    }
+    return b
   }),
   (tcu.convStr2Json = function (jsonStr) {
     return eval('(' + jsonStr + ')')
   }),
-  (tcu.convKeySize2CSP = function (r) {
-    return r == TCA.RSA1024 ? 67108864 : r == TCA.RSA2048 ? 134217728 : r == TCA.SM2 ? 16777216 : -1
+  (tcu.convKeySize2CSP = function (a) {
+    return a == TCA.RSA1024 ? 67108864 : a == TCA.RSA2048 ? 134217728 : a == TCA.SM2 ? 16777216 : -1
   }),
-  (tcu.strInList = function (r, t) {
-    if (t.length <= 0) return !1
-    for (var e = 0; e < t.length; e++) if (r === t[e]) return !0
+  (tcu.strInList = function (c, b) {
+    if (b.length <= 0) {
+      return !1
+    }
+    for (var a = 0; a < b.length; a++) {
+      if (c === b[a]) {
+        return !0
+      }
+    }
     return !1
   }),
-  (tcu.tcaAlg2SDKAlg = function (r) {
-    switch (r) {
+  (tcu.tcaAlg2SDKAlg = function (a) {
+    switch (a) {
       case TCA.SM4:
         return 65
       case TCA.DES:
@@ -1355,117 +1771,117 @@ var ERRMAP_ZHCN = {
         return 0
     }
   }),
-  (tcu.arr2Str = function (r) {
-    for (var t = '', e = 0; e < r.length; e++) {
-      var n = r[e]
-      ;(n = n.replace(/\r/g, '\\r').replace(/\n/g, '\\n')), (t = t + '"' + n + '", ')
-    }
-    return t.length > 0 && (t = t.substr(0, t.length - 2)), '[' + t + ']'
-  }),
-  (tcu.json2Str = function (r) {
-    var t = '{'
-    for (var e in r) {
-      t += '"' + e + '":'
-      var n = r[e]
-      tcu.isStr(n)
-        ? ((n = n.replace(/\\/g, '\\\\').replace(/\r/g, '\\r').replace(/\n/g, '\\n').replace(/\"/g, '\\"')),
-          (t += '"' + n + '",'))
-        : tcu.isNum(n) || tcu.isBool(n)
-        ? (t += n + ',')
-        : tcu.isArr(n)
-        ? (t += tcu.arr2Str(n) + ',')
+  (tcu.arr2Str = function (d) {
+    for (var c = '', a = 0; a < d.length; a++) {
+      var b = d[a]
+      c = c + '"' + (b = b.replace(/\r/g, '\\r').replace(/\n/g, '\\n')) + '", '
+    }
+    return 0 < c.length && (c = c.substr(0, c.length - 2)), '[' + c + ']'
+  }),
+  (tcu.json2Str = function (b) {
+    var c = '{'
+    for (var a in b) {
+      c += '"' + a + '":'
+      var d = b[a]
+      tcu.isStr(d)
+        ? (c +=
+            '"' +
+            (d = d.replace(/\\/g, '\\\\').replace(/\r/g, '\\r').replace(/\n/g, '\\n').replace(/\"/g, '\\"')) +
+            '",')
+        : tcu.isNum(d) || tcu.isBool(d)
+        ? (c += d + ',')
+        : tcu.isArr(d)
+        ? (c += tcu.arr2Str(d) + ',')
         : TCACErr.throwErr(ERRMAP.ERROR_JSON_TYPE)
     }
-    return (t += '"_jsonEnd":"_jsonEnd"}')
-  }),
-  (tcu.sign = function (r, t, e, n, i, c, a, s, o, A, u, C) {
-    var l = {
-      certStore: r,
-      certIDArr: t,
-      hash: e,
-      bSignHash: n,
-      bSignP7: i,
-      bAttr: c,
-      bIncCtx: a,
-      bIncCert: s,
-      inType: o,
-      inParam: A,
-      outType: u,
-      outParam: C
-    }
-    l = tcu.json2Str(l)
-    var T,
-      E = TCACore.getInstance()
+    return c + '"_jsonEnd":"_jsonEnd"}'
+  }),
+  (tcu.sign = function (j, g, v, k, q, w, d, h, y, f, m, b) {
+    var z = {
+      certStore: j,
+      certIDArr: g,
+      hash: v,
+      bSignHash: k,
+      bSignP7: q,
+      bAttr: w,
+      bIncCtx: d,
+      bIncCert: h,
+      inType: y,
+      inParam: f,
+      outType: m,
+      outParam: b
+    }
+    z = tcu.json2Str(z)
+    var p,
+      x = TCACore.getInstance()
     try {
-      T = E.call('Sign/sign', l)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.SIGN_ERROR), null
-    }
-    return T
-  }),
-  (tcu.verify = function (r, t, e, n, i, c, a, s, o) {
-    var A = {
-      b64Cert: r,
-      isHashSign: t,
-      isPkcs7: e,
-      hash: n,
-      verifyOption: i,
-      signInType: c,
-      signInParam: a,
-      plainInType: s,
-      plainInParam: o
-    }
-    A = tcu.json2Str(A)
-    var u,
-      C = TCACore.getInstance()
+      p = x.call('Sign/sign', z)
+    } catch (j) {
+      return TCACErr.throwErr(j, ERRMAP.SIGN_ERROR), null
+    }
+    return p
+  }),
+  (tcu.verify = function (v, p, h, d, g, j, k, b, q) {
+    var m = {
+      b64Cert: v,
+      isHashSign: p,
+      isPkcs7: h,
+      hash: d,
+      verifyOption: g,
+      signInType: j,
+      signInParam: k,
+      plainInType: b,
+      plainInParam: q
+    }
+    m = tcu.json2Str(m)
+    var f,
+      w = TCACore.getInstance()
     try {
-      u = C.call('Verify/verify', A)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.VERIFY_ERROR), null
+      f = w.call('Verify/verify', m)
+    } catch (v) {
+      return TCACErr.throwErr(v, ERRMAP.VERIFY_ERROR), null
     }
-    return u
+    return f
   }),
-  (tcu.enc = function (r, t, e, n, i, c, a) {
-    var s = { certArr: r, symmAlg: t, bEncP7: e, inType: n, inParam: i, outType: c, outParam: a }
-    s = tcu.json2Str(s)
-    var o,
-      A = TCACore.getInstance()
+  (tcu.enc = function (m, k, f, b, d, g, h) {
+    var p = { certArr: m, symmAlg: k, bEncP7: f, inType: b, inParam: d, outType: g, outParam: h }
+    p = tcu.json2Str(p)
+    var l,
+      j = TCACore.getInstance()
     try {
-      o = A.call('Enc/enc', s)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.ENCRYPT_ERROR), null
+      l = j.call('Enc/enc', p)
+    } catch (m) {
+      return TCACErr.throwErr(m, ERRMAP.ENCRYPT_ERROR), null
     }
-    return o
+    return l
   }),
-  (tcu.dec = function (r, t, e, n, i, c, a) {
-    var s = { certStore: r, certIDArr: t, bIsP7: e, inType: n, inParam: i, outType: c, outParam: a }
-    s = tcu.json2Str(s)
-    var o,
-      A = TCACore.getInstance()
+  (tcu.dec = function (m, k, f, b, d, g, h) {
+    var p = { certStore: m, certIDArr: k, bIsP7: f, inType: b, inParam: d, outType: g, outParam: h }
+    p = tcu.json2Str(p)
+    var l,
+      j = TCACore.getInstance()
     try {
-      o = A.call('Dec/dec', s)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.DECRYPT_ERROR), null
+      l = j.call('skf/skfdec', p)
+    } catch (m) {
+      return TCACErr.throwErr(m, ERRMAP.DECRYPT_ERROR), null
     }
-    return o
+    return l
   }),
-  (tcu.checkHashAlg = function (r, t) {
-    return (
-      !((r === 'SM2' && t != TCA.SM3) || (r === 'RSA' && t === TCA.SM3)) ||
-      (TCACErr.throwErr(ERRMAP.SIGN_ERROR_HASH_ALG), !1)
-    )
+  (tcu.checkHashAlg = function (b, a) {
+    if (('SM2' === this.publicKeyAlg() && a != TCA.SM3) || ('RSA' === this.publicKeyAlg() && a === TCA.SM3)) {
+      return TCACErr.throwErr(ERRMAP.SIGN_ERROR_HASH_ALG), !1
+    }
   }),
   (tcu.getSrvVersion = function () {
-    var r,
-      t = TCA.IO.MSG,
-      e = '{"outType" :' + t + '}',
-      n = TCACore.getInstance()
+    var c,
+      b = '{"outType" :' + TCA.IO.MSG + '}',
+      a = TCACore.getInstance()
     try {
-      r = n.call('Server/version', e)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.ERROR_CALL_SRV_VER), null
+      c = a.call('Server/version', b)
+    } catch (c) {
+      return TCACErr.throwErr(c, ERRMAP.ERROR_CALL_SRV_VER), null
     }
-    return r
+    return c
   }),
   (tcu.ajax = function (jsonParam) {
     var url = jsonParam.url,
@@ -1478,49 +1894,577 @@ var ERRMAP_ZHCN = {
         (request.open('POST', url, !1),
         request.setRequestHeader('Content-Type', 'application/json; charset=UTF-8'),
         request.send(data),
-        request.status == 200)
-      )
+        200 == request.status)
+      ) {
+        if (tcu.isFFKyLinFT()) {
+          var r = request.responseText.substr(0, request.responseText.lastIndexOf('}') + 1)
+          return void successCallback(eval('(' + r + ')'))
+        }
         return void successCallback(eval('(' + request.responseText + ')'))
+      }
     } catch (r) {
       return void errorCallback(request, request.statusText, 'send error & no error thrown')
     }
     errorCallback(request, request.statusText, 'no error thrown')
   }),
-  (tcu.hash = function (r, t, e, n, i) {
-    var c = { hash: r, inType: t, inParam: e, outType: n, outParam: i }
+  (tcu.hash = function (l, j, b, k, h) {
+    var g = { hash: l, inType: j, inParam: b, outType: k, outParam: h }
+    g = tcu.json2Str(g)
+    var d,
+      f = TCACore.getInstance()
+    try {
+      d = f.call('Hash/hash', g)
+    } catch (l) {
+      return TCACErr.throwErr(l, ERRMAP.DECRYPT_ERROR), null
+    }
+    return d
+  }),
+  (tcu.random = function (d) {
+    var c = { byteLen: d }
     c = tcu.json2Str(c)
     var a,
-      s = TCACore.getInstance()
+      b = TCACore.getInstance()
     try {
-      a = s.call('Hash/hash', c)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.DECRYPT_ERROR), null
+      a = b.call('rand/rand', c)
+    } catch (d) {
+      return TCACErr.throwErr(d, ERRMAP.DECRYPT_ERROR), null
     }
     return a
   }),
-  (tcu.random = function (r) {
-    var t = { byteLen: r }
-    t = tcu.json2Str(t)
-    var e,
-      n = TCACore.getInstance()
+  (tcu.symm = function (q, m, g, b, f, h, j, v) {
+    var p = { isEnc: b, b64Key: q, b64IV: m, symmAlg: g, inType: f, inParam: h, outType: j, outParam: v }
+    p = tcu.json2Str(p)
+    var k,
+      d = TCACore.getInstance()
     try {
-      e = n.call('rand/rand', t)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.DECRYPT_ERROR), null
+      k = d.call('symm/symm', p)
+    } catch (q) {
+      return TCACErr.throwErr(q, ERRMAP.DECRYPT_ERROR), null
     }
-    return e
+    return k
   }),
-  (tcu.symm = function (r, t, e, n, i, c, a, s) {
-    var o = { isEnc: n, b64Key: r, b64IV: t, symmAlg: e, inType: i, inParam: c, outType: a, outParam: s }
-    o = tcu.json2Str(o)
-    var A,
-      u = TCACore.getInstance()
+  (tcu.clearStore = function (d, c) {
+    var a = { providerName: d, providerType: c, param: '', mode: 0 }
+    a = tcu.json2Str(a)
+    var b = TCACore.getInstance()
     try {
-      A = u.call('symm/symm', o)
-    } catch (r) {
-      return TCACErr.throwErr(r, ERRMAP.DECRYPT_ERROR), null
+      b.call('ukey/ukey', a)
+    } catch (d) {
+      return TCACErr.throwErr(d, ERRMAP.DECRYPT_ERROR), !1
+    }
+    return !0
+  }),
+  (tcu.skfCheckDriver = function (a, f) {
+    var b = { parama: a, paramb: f }
+    b = tcu.json2Str(b)
+    var c,
+      d = TCACore.getInstance()
+    try {
+      c = d.call('skf/skfCheckDriver', b)
+    } catch (a) {
+      return TCACErr.throwErr(a, ERRMAP.DECRYPT_ERROR), null
+    }
+    return c
+  }),
+  (tcu.skfListStore = function (a, f) {
+    var b = { driverNameList: a, driverList: f }
+    b = tcu.json2Str(b)
+    var c,
+      d = TCACore.getInstance()
+    try {
+      c = d.call('skf/skfListStore', b)
+    } catch (a) {
+      return TCACErr.throwErr(a, ERRMAP.DECRYPT_ERROR), null
+    }
+    return c
+  }),
+  (tcu.skfListCert = function (l, j, b, k, h) {
+    var g = { providerPath: l, devName: j, appName: b, adminPin: k, userPin: h }
+    g = tcu.json2Str(g)
+    var d,
+      f = TCACore.getInstance()
+    try {
+      d = f.call('skf/skfListCert', g)
+    } catch (l) {
+      return TCACErr.throwErr(l, ERRMAP.DECRYPT_ERROR), null
+    }
+    return d
+  }),
+  (tcu.skfSign = function (j, g, v, k, q, w, d, h, y, f, m, b) {
+    var z = {
+      provName: j,
+      b64Cert: g,
+      hash: v,
+      bSignHash: k,
+      bSignP7: q,
+      bAttr: w,
+      bIncCtx: d,
+      bIncCert: h,
+      inType: y,
+      inParam: f,
+      outType: m,
+      outParam: b
+    }
+    z = tcu.json2Str(z)
+    var p,
+      x = TCACore.getInstance()
+    try {
+      p = x.call('skf/skfSign', z)
+    } catch (j) {
+      return TCACErr.throwErr(j, ERRMAP.DECRYPT_ERROR), null
+    }
+    return p
+  }),
+  (tcu.skfdec = function (j, g, v, k, q, w, d, h, y, f, m, b) {
+    var z = {
+      providerPath: j,
+      devName: g,
+      appName: v,
+      adminPin: k,
+      userPin: q,
+      containerName: w,
+      b64Cert: d,
+      bIsP7: h,
+      inType: y,
+      inParam: f,
+      outType: m,
+      outParam: b
+    }
+    z = tcu.json2Str(z)
+    var p,
+      x = TCACore.getInstance()
+    try {
+      p = x.call('skf/skfdec', z)
+    } catch (j) {
+      return TCACErr.throwErr(j, ERRMAP.DECRYPT_ERROR), null
+    }
+    return p
+  }),
+  (tcu.clearPinCache = function (f) {
+    var b = TCACore.getInstance()
+    var c = { clid: '', method: 'clearpin', params: [f] }
+    c = tcu.json2Str(c)
+    try {
+      return b.call('KeyCom/call', c)
+    } catch (d) {
+      return TCACErr.throwErr(d, ERRMAP.CLEAR_PIN_CACHE_ERROR)
+    }
+  }),
+  (tcu.isSKFProv = function (c) {
+    for (
+      var b = [
+          'Longmai mToken GM3000 for HNCA CSP V1.1',
+          'Longmai',
+          'HSIC SKF CSP For HD Provider',
+          'HSIC',
+          'HaiTai Cryptographic Service Provider 20522',
+          'HaiTai SKF 20522 For HunanCA'
+        ],
+        a = 0;
+      a < b.length;
+      a++
+    ) {
+      if (c == b[a]) {
+        return !0
+      }
+    }
+    return !1
+  }),
+  (tcu.convProvName = function (a) {
+    return 0 == a.indexOf('Longmai')
+      ? 'Longmai'
+      : 0 == a.indexOf('HSIC')
+      ? 'HSIC'
+      : 0 == a.indexOf('HaiTai')
+      ? 'HaiTai SKF 20522 For HunanCA'
+      : void 0
+  }),
+  (tcu.isFFKyLinFT = function () {
+    return 0 < window.navigator.userAgent.indexOf('Linux')
+  }),
+  (tcu.ffKylinFT = {}),
+  (tcu.ffKylinFT.F_IO_MSG = 1),
+  (tcu.ffKylinFT.F_IO_FILE = 2),
+  (tcu.ffKylinFT.F_IO_SELFILE = 4),
+  (tcu.ffKylinFT.F_IO_BIN = 65536),
+  (tcu.ffKylinFT.F_IO_B64 = 131072),
+  (tcu.ffKylinFT.F_IO_HEX = 262144),
+  (tcu.ffKylinFT.F_IO_U8 = 524288),
+  (tcu.ffKylinFT.listKeyStore = function (q) {
+    var m = TCACore.getInstance(),
+      g = { mode: 1, param: '11' }
+    g = tcu.json2Str(g)
+    var b = null
+    try {
+      b = m.call('certStore/skfListProv', g)
+    } catch (q) {
+      return TCACErr.throwErr(q, ERRMAP.LIST_STORE_ERROR), []
+    }
+    q = !m.getCfg('disableWhiteList') && q
+    for (var f = m.getCfg('whiteList'), h = m.getCfg('useAlias'), j = [], v = b.skfDevInfos, p = 0; p < v.length; p++) {
+      var k = v[p].name
+      q
+        ? tcu.strInList(k, f) && j.push({ name: h ? m.full2Alias(k) : k, type: v[p].type })
+        : j.push({ name: h ? m.full2Alias(k) : k, type: v[p].type })
+    }
+    function d(c, l) {
+      var e = Object.getOwnPropertyNames(c),
+        n = Object.getOwnPropertyNames(l)
+      if (e.length != n.length) {
+        return !1
+      }
+      for (var a = 0; a < e.length; a++) {
+        var i = e[a]
+        if (c[i] !== l[i]) {
+          return !1
+        }
+      }
+      return !0
+    }
+    return (function (c) {
+      if (!c) {
+        return null
+      }
+      for (var l = [], e = 0; e < c.length; e++) {
+        for (var n = !0, a = c[e], i = 0; i < l.length; i++) {
+          if (d(a, l[i])) {
+            return (n = !1)
+          }
+        }
+        n && l.push(a)
+      }
+      return l
+    })(j)
+  }),
+  (tcu.ffKylinFT.convCertInfo = function (d) {
+    var c,
+      a = {}
+    ;(a = d.cert),
+      (c = (c = new Date(1000 * a.notBefore).toString()).substr(0, c.lastIndexOf('+'))),
+      (a.notBefore = new Date(c)),
+      (c = (c = new Date(1000 * a.notAfter).toString()).substr(0, c.lastIndexOf('+'))),
+      (a.notAfter = new Date(c))
+    var b = d.priKeyInfo
+    return (
+      (a.keyStoreName = d.keyStoreName),
+      (a.keyStoreType = 1),
+      (a.certStoreName = b.certStoreName),
+      (a.certContainerName = b.containerName),
+      (a.certKeySpec = b.isSignKey ? 2 : 1),
+      a
+    )
+  }),
+  (tcu.ffKylinFT.listAllCerts = function () {
+    var j = CertStore.listStore()
+    var l = TCACore.getInstance(),
+      d = []
+    var b = { certStoreName: 'Longmai', needB64: !0 }
+    b = tcu.json2Str(b)
+    var f = null
+    try {
+      f = l.call('certStore/skfListCerts', b)
+    } catch (l) {
+      return TCACErr.throwErr(l, ERRMAP.LIST_CERT_ERROR), new CertSet()
+    }
+    for (var g = f.certArr, m = 0; m < g.length; m++) {
+      var k = g[m]
+      var h = new Certificate(tcu.ffKylinFT.convCertInfo(k))
+      l.certInLic(h) && d.push(h)
+    }
+    return new CertSet(d)
+  }),
+  (tcu.ffKylinFT.genCsr = function (f, b, g, k) {
+    var j = TCACore.getInstance(),
+      h = {
+        mode: f ? 1 : 2,
+        subject: 'topca',
+        provName: 'Longmai',
+        provType: 1,
+        containerName: b,
+        keySpec: 2,
+        keyAlg: k,
+        hashAlg: g,
+        opation: 1
+      }
+    h = tcu.json2Str(h)
+    var d = null
+    try {
+      d = j.call('certStore/skfGenCsr', h)
+    } catch (f) {
+      return TCACErr.throwErr(f, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return d
+  }),
+  (tcu.ffKylinFT.softGenCsr = function (f, b, h, p, g) {
+    var o = TCACore.getInstance(),
+      j = {
+        mode: f ? 1 : 2,
+        subject: 'topca',
+        provName: g,
+        provType: 1,
+        containerName: b,
+        keySpec: 2,
+        keyAlg: p,
+        hashAlg: h,
+        opation: 1
+      }
+    j = tcu.json2Str(j)
+    var d = null
+    try {
+      d = o.call('certStore/SoftGenCsr', j)
+    } catch (f) {
+      return TCACErr.throwErr(f, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return d
+  }),
+  (tcu.ffKylinFT.parseCert = function (a) {
+    var f = TCACore.getInstance(),
+      b = { certStoreNames: ['Longmai'], b64Cert: a }
+    b = tcu.json2Str(b)
+    var c = null
+    try {
+      c = f.call('cert/skfParseCert', b)
+    } catch (a) {
+      return TCACErr.throwErr(a, ERRMAP.LIST_STORE_ERROR), []
+    }
+    var d = c.certAndKeyInfo
+    return tcu.ffKylinFT.convCertInfo(d)
+  }),
+  (tcu.ffKylinFT.parseP7 = function (d) {
+    var c = TCACore.getInstance(),
+      a = { inType: TCA.IO.MSG | TCA.IO.B64, inParam: d, needCerts: !0, needContent: !0, needB64: !1 }
+    a = tcu.json2Str(a)
+    var b = null
+    try {
+      b = c.call('pkcs7/parsePkcs7', a)
+    } catch (d) {
+      return TCACErr.throwErr(d, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return b.pkcs7Info
+  }),
+  (tcu.ffKylinFT.sign = function (w, p, j, f, h, m, q, d, v) {
+    var k,
+      g = TCACore.getInstance()
+    ;(k = q
+      ? {
+          certStoreName: 'Longmai',
+          b64cert: w,
+          hashAlg: p,
+          inType: j,
+          inParam: f,
+          outType: h,
+          outParam: m,
+          plainIsHash: d
+        }
+      : {
+          certStoreName: 'Longmai',
+          b64cert: w,
+          hashAlg: p,
+          inType: j,
+          inParam: f,
+          outType: h,
+          outParam: m,
+          incAttr: !1,
+          IncCtx: v,
+          IncCert: !0
+        }),
+      (k = tcu.json2Str(k))
+    var b = null,
+      x = q ? 'sign/skfSignRaw' : 'sign/skfSignPkcs7'
+    try {
+      b = g.call(x, k)
+    } catch (w) {
+      return TCACErr.throwErr(w, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return b.result
+  }),
+  (tcu.ffKylinFT.softSign = function (p, x, q, j, f, h, m, v, d, w) {
+    var k,
+      g = TCACore.getInstance()
+    var p = g.getCfg('useAlias') ? g.alias2Full(p) : p
+    ;(k = v
+      ? { certStoreName: p, b64cert: x, hashAlg: q, inType: j, inParam: f, outType: h, outParam: m, plainIsHash: d }
+      : {
+          certStoreName: p,
+          b64cert: x,
+          hashAlg: q,
+          inType: j,
+          inParam: f,
+          outType: h,
+          outParam: m,
+          incAttr: !1,
+          IncCtx: w,
+          IncCert: !0
+        }),
+      (k = tcu.json2Str(k))
+    var b = null,
+      A = v ? 'sign/SoftSignRaw' : 'sign/SoftSignPkcs7'
+    try {
+      b = g.call(A, k)
+    } catch (x) {
+      return TCACErr.throwErr(x, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return b.result
+  }),
+  (tcu.ffKylinFT.verify = function (w, p, j, f, h, m, q, d, v) {
+    var k,
+      g = TCACore.getInstance()
+    ;(k = m
+      ? { b64cert: w, hashAlg: d, plainInType: p, plainInParam: j, signInType: f, signInParam: h, plainIsHash: v }
+      : { b64cert: w, plainInType: p, plainInParam: j, signInType: f, signInParam: h, verifyOption: q }),
+      (k = tcu.json2Str(k))
+    var b = null,
+      x = m ? 'verify/verifyRawSign' : 'verify/verifyPkcs7Sign'
+    try {
+      b = g.call(x, k)
+    } catch (w) {
+      return TCACErr.throwErr(w, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return b
+  }),
+  (tcu.ffKylinFT.enc = function (q, m, g, b, f, h, j) {
+    var v,
+      p = TCACore.getInstance()
+    ;(v = h
+      ? { b64cert: q, inType: m, inParam: g, outType: b, outParam: f }
+      : { b64cert: q, symmAlg: j, inType: m, inParam: g, outType: b, outParam: f }),
+      (v = tcu.json2Str(v))
+    var k = null,
+      d = h ? 'enc/encRaw' : 'enc/encPkcs7'
+    try {
+      k = p.call(d, v)
+    } catch (q) {
+      return TCACErr.throwErr(q, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return k
+  }),
+  (tcu.ffKylinFT.dec = function (m, k, f, b, d, g) {
+    var h,
+      p = TCACore.getInstance()
+    ;(h = m
+      ? { certStoreNames: ['Longmai'], inType: k, inParam: f, outType: b, outParam: d }
+      : { certStoreName: 'Longmai', b64cert: g, inType: k, inParam: f, outType: b, outParam: d }),
+      (h = tcu.json2Str(h))
+    var l = null,
+      j = m ? 'dec/skfDecPkcs7' : 'dec/skfDecRaw'
+    try {
+      l = p.call(j, h)
+    } catch (m) {
+      return TCACErr.throwErr(m, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return l
+  }),
+  (tcu.ffKylinFT.installSign = function (d) {
+    var c = TCACore.getInstance(),
+      a = { certStoreName: 'Longmai', b64SignCertP7: d, b64SignCert: '', installCertChain: !0, saveUserCertToCSP: !0 }
+    a = tcu.json2Str(a)
+    var b = null
+    try {
+      b = c.call('certStore/skfInstallSignCert', a)
+    } catch (d) {
+      return TCACErr.throwErr(d, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return b
+  }),
+  (tcu.ffKylinFT.installEnc = function (b, l, h, f, g, j) {
+    var k = TCACore.getInstance(),
+      d = {
+        certStoreName: 'Longmai',
+        gmmode: !1,
+        b64SignCert: b,
+        b64EncCert: l,
+        b64EncSymmKey: h,
+        b64Iv: f,
+        b64EncPrivateKey: j,
+        symmAlg: g,
+        option: 0
+      }
+    d = tcu.json2Str(d)
+    var m = null
+    try {
+      m = k.call('certStore/skfInstallEncCert', d)
+    } catch (b) {
+      return TCACErr.throwErr(b, ERRMAP.LIST_STORE_ERROR), []
+    }
+    return m
+  }),
+  (tcu.ffKylinFT.clearPinCache = function (g, c) {
+    var b = TCACore.getInstance()
+    var d = { b64cert: c, certStoreName: g }
+    d = tcu.json2Str(d)
+    try {
+      return b.call('certStore/skfPinCacheClear', d)
+    } catch (f) {
+      if (f.number === 556466177) {
+        return true
+      }
+      return TCACErr.throwErr(f, ERRMAP.CLEAR_PIN_CACHE_ERROR)
+    }
+  }),
+  (tcu.ffKylinFT.verifyPin = function (h, i, f) {
+    var d = TCACore.getInstance()
+    var b = { b64cert: i, certStoreName: h, userPin: f }
+    b = tcu.json2Str(b)
+    var c = null
+    try {
+      c = d.call('certStore/skfVerifyPin', b)
+    } catch (g) {
+      return TCACErr.throwErr(g, ERRMAP.VERIFY_PIN_ERROR)
+    }
+    return c
+  }),
+  (tcu.ffKylinFT.delCert = function (g, h) {
+    var d = TCACore.getInstance()
+    var b = { b64Cert: h, certStoreName: g }
+    b = tcu.json2Str(b)
+    var c = null
+    try {
+      c = d.call('skf/certStore/skfDelCert', b)
+    } catch (f) {
+      return TCACErr.throwErr(f, ERRMAP.VERIFY_PIN_ERROR)
+    }
+    return c
+  }),
+  (tcu.ffKylinFT.softDelCert = function (g, h) {
+    var d = TCACore.getInstance()
+    var b = { b64Cert: h, certStoreName: g, delKey: true }
+    b = tcu.json2Str(b)
+    var c = null
+    try {
+      c = d.call('certStore/SoftDelCert', b)
+    } catch (f) {
+      return TCACErr.throwErr(f, ERRMAP.VERIFY_PIN_ERROR)
+    }
+    return c
+  }),
+  (tcu.ffKylinFT.softImportP12 = function (i, h, g) {
+    var d = TCACore.getInstance()
+    var b = { p12Pwd: i, inType: h, inParam: g }
+    b = tcu.json2Str(b)
+    var c = null
+    try {
+      c = d.call('certStore/SoftImportP12', b)
+    } catch (f) {
+      return TCACErr.throwErr(f, ERRMAP.VERIFY_PIN_ERROR)
+    }
+    return c
+  }),
+  (tcu.ffKylinFT.getDriveVersion = function () {
+    var c = TCACore.getInstance()
+    var b = CertStore.listStore()
+    if (b.length == 0) {
+      return ''
+    }
+    var h = b[0]
+    var d = { certStoreName: h }
+    d = tcu.json2Str(d)
+    var f = null
+    try {
+      f = c.call('certStore/skfGetDevInfo', d)
+    } catch (g) {
+      return TCACErr.throwErr(g, ERRMAP.GET_DEVINFO_ERROR)
     }
-    return A
+    return f.skfdevInfos.Version
   })
 
 /*
@@ -1563,11 +2507,7 @@ try {
   Notification({
     title: '提示',
     dangerouslyUseHTMLString: true,
-    message: `<div>检测到您的电脑中没有安装签名助手，为了不影响使用请使用管理员权限<a class="color-primary" href="/portal/${
-      process.env.VUE_APP_NetSign_ARG_SignName ||
-      window.VUE_APP_NetSign_ARG_SignName ||
-      '天诚安信数字证书助手-3.7.7.0.exe'
-    }" download>下载安装</a>天诚安信数字证书助手</div>`,
+    message: `<div>检测到您的电脑中没有安装签名助手，为了不影响使用请使用管理员权限<a class="color-primary" href="/portal/天诚安信数字证书助手-3.7.7.0.exe" download>下载安装</a>天诚安信数字证书助手</div>`,
     duration: 5000
   })
 }
@@ -1610,7 +2550,11 @@ export function getSign(plain, dn) {
         }
       }
       if (sginCert) {
-        return sginCert.signMessage(plain, false)
+        sginCert.clearPinCache()
+        return sginCert.signMessage(
+          plain,
+          process.env.VUE_APP_NetSign_ARG_PLAIN || window.VUE_APP_NetSign_ARG_PLAIN || true
+        )
       } else {
         Message.warning('没有匹配到证书！')
       }
@@ -1621,6 +2565,7 @@ export function getSign(plain, dn) {
     if (e instanceof TCACErr) {
       Message.error(e.toStr())
     } else {
+      console.log('签名失败', e)
       Message.error('签名失败！')
     }
   }