martinpaljak / vjcre

Virtual Java Card Runtime Environment RETIRED

Hi there 👋

This is Martin from 🇪🇪 Estonia 🇪🇺. Every now and then I push code to Github, that scratches my own itches (remembering Kerckhoff's principle!).

Most probably you're here because of the "open source javacard software development toolkit" that consists of

• 🌐 GlobalPlatformPro
• 🐜 ant-javacard

🛜 NFC/NDEF and 🔑 FIDO/WebAuthn are topics where you can expect developments in 2024.

There are also historical bits and pieces related to generic smart cards (PC/SC, CCID) and crypto with Java/JavaScript/PKCS#11, and Estonian eID and identity (OpenID etc) in general.

When it comes to Estonian eID, most of what I worked on has been continued by others: @OpenSC (open source PKCS#11 and native platform crypto drivers for smart cards), @web-eid (modern WebExtensions based authentication and signing for desktop browsers) and @open-eid (ages ago I pushed Estonia to publish (most of) it's eID client software as open source)

Feel free to 💬 book a call if you have any questions or ongoing projects in these domains or to 🙏 sponsor my open source work!

News

• March 2024: ant-javacard now supports the latest v3.2.0 JavaCard SDK
• August 2023: ant-javacard got a new release after almost 2 years. Groundwork for a smoother and more stable build toolkit and new release for GlobalPlatformPro as well.
• July 2023: "NFC tags for PC-s" got a rewrite and first pretty release. Have a look!
• April 2023: GlobalPlatformPro received a small recognition from Google Open Source via a Peer Bonus :) (thx @kt)

vjcre's Issues

Unable to test the ouput of a select applet command

The tool is very good.
However it is difficult to test functions involving selectingApplet() returning true except doing test with a hardcoded value of "true". Hopefully, this is case only for the first function called.

Indeed, selectingApplet() returns false every time and I wasn't able to call the overwrite of the select function of the applet.
Seems to be a FIXME:

vJCRE/src/javacard/framework/Applet.java

Lines 35 to 37 in 85c7828

	protected final boolean selectingApplet() {
	return false; // FIXME
	}

Maybe modify the "selectApplet" or "install" function to call the select function of the applet, set selectingApplet to return true and issue a SELECT APDU before setting selectingApplet to false

OwnerPIN check and update issue when using an offset

in /src/javacard/framework/OwnerPIN.java
(https://github.com/martinpaljak/vJCRE/blob/85c7828089fcde0fa8cde89a622b5ec582804947/src/javacard/framework/OwnerPIN.java)

The offset parameter of the functions check and update is not used.
My opinion is that:
Util.arrayCopy(pin, (short)0, value, (short)1, length);
should be changed to
Util.arrayCopy(pin, offset, value, (short)1, length);

and
if (Util.arrayCompare(pin, (short) 0, value, (short) 1, length) == 0) {
should be changed to
if (Util.arrayCompare(pin, offset, value, (short) 1, length) == 0) {

OwnerPIN.

Please check this again.
protected void setValidatedFlag(boolean value) {
validated = false; // ??? I think that It is "validated = value;"
}

Missing constant in ISO7816.java

The constant SW_COMMAND_CHAINING_NOT_SUPPORTED is missing

Reference:
http://www.win.tue.nl/pinpasjc/docs/apis/jc222/javacard/framework/ISO7816.html#SW_COMMAND_CHAINING_NOT_SUPPORTED

Underlying code:
https://github.com/martinpaljak/vJCRE/blob/85c7828089fcde0fa8cde89a622b5ec582804947/src/javacard/framework/ISO7816.java

missing line:
short SW_COMMAND_CHAINING_NOT_SUPPORTED = 0x6884;

sendBytesLong doesn't throw an exception if setOutgoingLength not called

According to http://www.win.tue.nl/pinpasjc/docs/apis/jc222/javacard/framework/APDU.html#sendBytesLong%28byte[],%20short,%20short%29

"throws:(...) APDUException.ILLEGAL_USE if setOutgoingLength() not called or setOutgoingAndSend() previously invoked or response byte count exceeded or if APDUException.NO_T0_GETRESPONSE or APDUException.NO_T0_REISSUE or APDUException.NO_T0_REISSUE previously thrown. "

Indeed no check is done on sendBytesLong for that

vJCRE/src/pro/javacard/vre/vAPDU.java

Line 92 in 85c7828

public void sendBytesLong(byte outData[], short bOff, short len) throws APDUException, SecurityException {

Took me a while to find the problem in my card when testing on the card while it was fine on the emulator ;-)

APDU.receiveBytes not working

Indeed in VRE.transmit, you do not get the size of the array sent (https://github.com/martinpaljak/vJCRE/blob/master/src/pro/javacard/vre/VRE.java#L207-L211)

So when APDU.receiveBytes is called:

• the data copy to the APDU buffer is not made (ref http://www.win.tue.nl/pinpasjc/docs/apis/jc222/javacard/framework/APDU.html#receiveBytes%28short%29)
• the whole buffer is parsed, but its size (65k bytes) may oversize the local buffer allowed by the card, even if a few bytes are expected