use std::convert::TryInto;
pub use ca_spdu_status::*;
pub use ca_spdu_tag::*;
use super::{
apdu,
tpdu,
CaDevice,
};
use crate::error::{
Error,
Result,
};
pub const SPDU_HEADER_SIZE: usize = 4;
mod ca_spdu_tag {
pub const ST_SESSION_NUMBER: u8 = 0x90;
pub const ST_OPEN_SESSION_REQUEST: u8 = 0x91;
pub const ST_OPEN_SESSION_RESPONSE: u8 = 0x92;
pub const ST_CREATE_SESSION: u8 = 0x93;
pub const ST_CREATE_SESSION_RESPONSE: u8 = 0x94;
pub const ST_CLOSE_SESSION_REQUEST: u8 = 0x95;
pub const ST_CLOSE_SESSION_RESPONSE: u8 = 0x96;
}
mod ca_spdu_status {
pub const SS_OK: u8 = 0x00;
pub const SS_NOT_ALLOCATED: u8 = 0xF0;
}
fn assert_size(spdu: &[u8], size: usize) -> Result<()> {
if spdu.len() >= size && usize::from(spdu[2]) == size - 2 {
Ok(())
} else {
Err(Error::InvalidData("invalid ca spdu size".to_string()))
}
}
fn handle_session_number(ca: &mut CaDevice, _slot_id: u8, spdu: &[u8]) -> Result<()> {
let session_id = u16::from_be_bytes(spdu[2 ..= 3].try_into().unwrap());
apdu::handle(ca, session_id, &spdu[SPDU_HEADER_SIZE ..])
}
fn handle_open_session_request(ca: &mut CaDevice, slot_id: u8, spdu: &[u8]) -> Result<()> {
assert_size(spdu, 6)?;
let resource_id = u32::from_be_bytes(spdu[2 ..= 5].try_into().unwrap());
let session_id = apdu::init(ca, resource_id)?;
let response: [u8; 9] = [
ST_OPEN_SESSION_RESPONSE,
7,
SS_OK,
spdu[2],
spdu[3],
spdu[4],
spdu[5],
(session_id >> 8) as u8,
session_id as u8,
];
tpdu::send(ca, slot_id, tpdu::TT_DATA_LAST, &response)
}
fn handle_close_session_request(ca: &mut CaDevice, slot_id: u8, spdu: &[u8]) -> Result<()> {
assert_size(spdu, 4)?;
let session_id = u16::from_be_bytes(spdu[2 ..= 3].try_into().unwrap());
apdu::close(ca, session_id)?;
let response: [u8; 5] = [ST_CLOSE_SESSION_RESPONSE, 3, SS_OK, spdu[2], spdu[3]];
tpdu::send(ca, slot_id, tpdu::TT_DATA_LAST, &response)
}
fn handle_create_session_response(ca: &mut CaDevice, _slot_id: u8, spdu: &[u8]) -> Result<()> {
assert_size(spdu, 9)?;
let session_id = u16::from_be_bytes(spdu[7 ..= 8].try_into().unwrap());
if spdu[2] == SS_OK {
apdu::open(ca, session_id)
} else {
println!("CA SPDU: failed to open session");
apdu::close(ca, session_id)
}
}
fn handle_close_session_response(ca: &mut CaDevice, _slot_id: u8, spdu: &[u8]) -> Result<()> {
assert_size(spdu, 5)?;
let session_id = u16::from_be_bytes(spdu[3 ..= 4].try_into().unwrap());
apdu::close(ca, session_id)
}
pub fn handle(ca: &mut CaDevice, slot_id: u8, spdu: &[u8]) -> Result<()> {
if spdu.len() < SPDU_HEADER_SIZE {
return Err(Error::InvalidData(
"ca spdu message is too short".to_string(),
));
}
match spdu[0] {
ST_SESSION_NUMBER => handle_session_number(ca, slot_id, spdu),
ST_OPEN_SESSION_REQUEST => handle_open_session_request(ca, slot_id, spdu),
ST_CLOSE_SESSION_REQUEST => handle_close_session_request(ca, slot_id, spdu),
ST_CREATE_SESSION_RESPONSE => handle_create_session_response(ca, slot_id, spdu),
ST_CLOSE_SESSION_RESPONSE => handle_close_session_response(ca, slot_id, spdu),
tag => Err(Error::InvalidData(format!(
"invalid ca spdu tag 0x{:02X}",
tag
))),
}
}