scp03

type CardCryptogramError struct {
	Expected []byte // Expected card cryptogram.
	Received []byte // Received card cryptogram.
}

type CommandSecurityLevel int

type ConfigureResponseSecurityLevel func(rmacSupport bool, rencSupport bool) ResponseSecurityLevel

type InitiationConfiguration struct {
	CommandSecurityLevel CommandSecurityLevel // Security Level applied for Command APDUs.
	ChannelID            uint8                // ID of the base/logical channel the SCP session shall be initiated on. Should be in range of 0-19.
	KeyVersionNumber     uint8                // Key Version Number within the Security Domain to be used to initiate the Secure Channel Session. If this value is zero, the first available key chosen by the Security Domain will be used.
	HostChallenge        [8]byte              // Host Challenge used in the INITIALIZE UPDATE command and as part of 'context' for session key derivation.
}

type KeyDerivationError struct {
	Message string
	Cause   error
}

type NonSuccessResponseError struct {
	Command  apdu.Capdu // CAPDU that was transmitted.
	Response apdu.Rapdu // RAPDU that has been received.
}

type RMACError struct {
	Expected []byte // Expected R-MAC.
	Received []byte // Received R-MAC.
}

type ResponseSecurityLevel int

type SecurityLevel struct {
	CDEC bool // command decryption
	CMAC bool // command Message authentication code
	RMAC bool // response Message authentication code
	RENC bool // response encryption
}

type Session struct {
	// contains filtered or unexported fields
}

type SessionKeyProvider interface {
	// ProvideSessionKey provides an AES session key by using the static AES key
	// with the given Key ID and Key Version Number and by using it with the data derivation
	// function specified in NIST SP 800-108.
	//
	// The result of the application of the KDF (which is the derived session key) is provided in dst.
	//
	// The PRF used in the KDF shall be CMAC as specified in NIST 800-38B, used with full 16-byte output length.
	// The “fixed input data” plus iteration counter for the KDF is the concatenation of the following items in the given sequence:
	// 		A 12-byte “label” consisting of 11 bytes with value '00' followed by a 1-byte derivation constant as defined below.
	//		A 1-byte “separation indicator” with value '00'.
	//		A 2-byte integer “L” specifying the length in bits of the derived data (value '0040', '0080', '00C0', or '0100').
	//		A 1-byte counter “i” as specified in the KDF (which may take the values '01' or '02'; value '02' is used when “L” takes the values '00C0' and '0100', i.e. when the PRF of the KDF is to be called twice to generate enough derived data).
	//		The “context” parameter of the KDF.
	//
	// Key ID and Key Version Number uniquely identify the key of a Security Domain that shall be used for the
	// Secure Channel Session.
	//
	// Key Diversification Data returned in the response to the INITIALIZE UPDATE command may be used for the derivation of static keys.
	ProvideSessionKey(dst []byte, label []byte, context []byte, keyID byte, kvn byte, diversificationData []byte) error

	// KeyByteSize returns the size of a key in the key set with the given Key Version Number in bytes.
	KeyByteSize(kvn byte) (int, error)
}

type TransmitError struct {
	Command apdu.Capdu // CAPDU that should have been transmitted.
	Cause   error
}

type Transmitter interface {
	Transmit(capdu apdu.Capdu) (apdu.Rapdu, error)
}