globalplatform.h

Go to the documentation of this file.

/*
 *  Copyright (c) 2010-2026, Karsten Ohme
 *  This file is part of GlobalPlatform.
 *
 *  GlobalPlatform is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU Lesser General Public License as published by
 *  the Free Software Foundation, either version 3 of the License, or
 *  (at your option) any later version.
 *
 *  GlobalPlatform is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU Lesser General Public License for more details.
 *
 *  You should have received a copy of the GNU Lesser General Public License
 *  along with GlobalPlatform.  If not, see <https://www.gnu.org/licenses/>.
 *
 * In addition, as a special exception, the copyright holders give
 * permission to link the code of portions of this program with the
 * OpenSSL library under certain conditions as described in each
 * individual source file, and distribute linked combinations
 * including the two.
 * You must obey the GNU Lesser General Public License in all respects
 * for all of the code used other than OpenSSL.  If you modify
 * file(s) with this exception, you may extend this exception to your
 * version of the file(s), but you are not obligated to do so.  If you
 * do not wish to do so, delete this exception statement from your
 * version.
 */
 
#ifndef OPGP_GLOBALPLATFORM_H
#define OPGP_GLOBALPLATFORM_H
 
#ifdef __cplusplus
extern "C"
{
#endif
 
#ifndef max
#define max(a,b) (((a)>(b))?(a):(b))
#endif
#ifndef min
#define min(a,b) (((a)>(b))?(b):(a))
#endif
 
#include <stdio.h>
#include "types.h"
#include "unicode.h"
#include "error.h"
#include "errorcodes.h"
#include "library.h"
#include "connection.h"
#include "security.h"
#include "stringify.h"
 
#define APDU_COMMAND_LEN 261 
#define APDU_RESPONSE_LEN 258 
 
static const BYTE OPGP_VISA_DEFAULT_KEY[16] = { 0x40, 0x41, 0x42, 0x43, 0x44,
                0x45, 0x46, 0x47, 0x48, 0x49, 0x4A, 0x4B, 0x4C, 0x4D, 0x4E, 0x4F };
 
static const BYTE OPGP_GEMXPRESSO_DEFAULT_KEY[16] = { 0x47, 0x45, 0x4d, 0x58,
                0x50, 0x52, 0x45, 0x53, 0x53, 0x4f, 0x53, 0x41, 0x4d, 0x50, 0x4c, 0x45 };
 
static const BYTE GP211_CARD_MANAGER_AID[7] = { 0xA0, 0x00, 0x00, 0x01, 0x51,
                0x00, 0x00 }; 
 
static const BYTE GP231_ISD_AID[8] = { 0xA0, 0x00, 0x00, 0x01, 0x51, 0x00, 0x00,
                0x00 };
 
static const BYTE GP211_CARD_MANAGER_AID_ALT1[8] = { 0xA0, 0x00, 0x00, 0x00,
                0x03, 0x00, 0x00, 0x00 }; 
 
static const BYTE GP211_CARD_MANAGER_AID_ALT2[7] = { 0xA0, 0x00, 0x00, 0x00,
                0x03, 0x00, 0x00 }; 
 
        static const BYTE GP211_CARD_MANAGER_AID_GEMPLUS[8] = { 0xA0, 0x00, 0x00, 0x00, 0x18, 0x43, 0x4D, 0x00 }; 
 
#define GP211_LIFE_CYCLE_LOAD_FILE_LOADED 0x01 
#define GP211_LIFE_CYCLE_CARD_OP_READY 0x01 
#define GP211_LIFE_CYCLE_CARD_INITIALIZED 0x07 
#define GP211_LIFE_CYCLE_CARD_SECURED 0x0f 
#define GP211_LIFE_CYCLE_CARD_LOCKED 0x7f 
#define GP211_LIFE_CYCLE_CARD_TERMINATED 0xff 
#define GP211_LIFE_CYCLE_APPLICATION_INSTALLED 0x03 
#define GP211_LIFE_CYCLE_APPLICATION_SELECTABLE 0x07 
#define GP211_LIFE_CYCLE_APPLICATION_LOCKED 0x83 
#define GP211_LIFE_CYCLE_SECURITY_DOMAIN_INSTALLED 0x03 
#define GP211_LIFE_CYCLE_SECURITY_DOMAIN_SELECTABLE 0x07 
#define GP211_LIFE_CYCLE_SECURITY_DOMAIN_PERSONALIZED 0x0f 
#define GP211_LIFE_CYCLE_SECURITY_DOMAIN_LOCKED 0x83 
 
/* consts for MANAGE CHANNEL */
 
#define GP211_MANAGE_CHANNEL_OPEN 0x00 
#define GP211_MANAGE_CHANNEL_CLOSE 0x80 
 
typedef enum {
        GP211_SECURITY_DOMAIN = 1u << (7 + 16), 
        GP211_DAP_VERIFICATION = 0xC0 << 16, 
        GP211_DELEGATED_MANAGEMENT = 0xA0 << 16, 
        GP211_CARD_MANAGER_LOCK_PRIVILEGE = 1u << (4 + 16), 
        GP211_CARD_MANAGER_TERMINATE_PRIVILEGE = 1u << (3 + 16), 
        GP211_DEFAULT_SELECTED_CARD_RESET_PRIVILEGE = 1u << (2 + 16), 
        GP211_PIN_CHANGE_PRIVILEGE = 1u << (1 + 16), 
        GP211_MANDATED_DAP_VERIFICATION = 0xD0 << 16, 
 
        GP211_TRUSTED_PATH = 1u << (7 + 8), 
        GP211_AUTHORIZED_MANAGEMENT = 1u << (6 + 8), 
        GP211_TOKEN_VERIFICATION = 1u << (5 + 8), 
        GP211_GLOBAL_DELETE = 1u << (4 + 8), 
        GP211_GLOBAL_LOCK = 1u << (3 + 8), 
        GP211_GLOBAL_REGISTRY = 1u << (2 + 8), 
        GP211_FINAL_APPLICATION = 1u << (1 + 8), 
        GP211_GLOBAL_SERVICE = 1u << (0 + 8), 
 
        GP211_RECEIPT_GENERATION = 1u << 7, 
        GP211_CIPHERED_LOAD_FILE_DATA_BLOCK = 1u << 6, 
        GP211_CONTACTLESS_ACTIVATION = 1u << 5, 
        GP211_CONTACTLESS_SELF_ACTIVATION = 1u << 4 
} GP211_APPLICATION_PRIVILEGES;
 
#define GP211_STATUS_APPLICATIONS 0x40 
#define GP211_STATUS_ISSUER_SECURITY_DOMAIN 0x80 
#define GP211_STATUS_LOAD_FILES 0x20 
#define GP211_STATUS_LOAD_FILES_AND_EXECUTABLE_MODULES 0x10 
 
#define GP211_STATUS_TYPE_APPLICATIONS 0x40 
#define GP211_STATUS_TYPE_ISSUER_SECURITY_DOMAIN 0x80 
#define GP211_STATUS_TYPE_SECURITY_DOMAIN_AND_APPLICATIONS 0x60 
 
#define GP211_STATUS_FORMAT_NEW 0x02 
#define GP211_STATUS_FORMAT_DEPRECATED 0x00 
 
/* Key Access Condition for STORE DATA */
#define GP211_KEY_ACCESS_SD_AND_APPS 0x00 
#define GP211_KEY_ACCESS_SD_ONLY 0x01 
#define GP211_KEY_ACCESS_APPS_ONLY 0x02 
 
/* Key Purpose for STORE DATA */
#define GP211_KEY_PURPOSE_SCP03 0x0003 
#define GP211_KEY_PURPOSE_SCP04 0x0004 
#define GP211_KEY_PURPOSE_SCP10 0x0010 
#define GP211_KEY_PURPOSE_SCP11 0x0011 
#define GP211_KEY_PURPOSE_TOKEN_VERIFICATION 0x7000 
#define GP211_KEY_PURPOSE_RECEIPT_GENERATION 0x7001 
#define GP211_KEY_PURPOSE_DAP_VERIFICATION 0x7003 
#define GP211_KEY_PURPOSE_CASD_AND_CONFIDENTIAL_SETUP 0x7004 
#define GP211_KEY_PURPOSE_CIPHERED_LOAD_FILE 0x7005 
 
// flags for STORE DATA
 
#define STORE_DATA_ENCRYPTION_NO_INFORMATION 0x00 
#define STORE_DATA_ENCRYPTION_APPLICATION_DEPENDENT 0x20 
#define STORE_DATA_ENCRYPTION_RFU 0x40 
#define STORE_DATA_ENCRYPTION_ENCRYPTED 0x60 
 
#define STORE_DATA_FORMAT_NO_INFORMATION 0x00 
#define STORE_DATA_FORMAT_DGI 0x08 
#define STORE_DATA_FORMAT_BER_TLV 0x10 
#define STORE_DATA_FORMAT_RFU 0x18 
 
 
// Some possible identifiers to retrieve card data with get_data() and put_data().
 
static const BYTE GP211_GET_DATA_ISSUER_IDENTIFICATION_NUMBER[2] = {0x00, 0x42}; 
static const BYTE GP211_GET_DATA_APPLICATION_PROVIDER_IDENTIFICATION_NUMBER[2] = {0x00, 0x42}; 
static const BYTE GP211_GET_DATA_ECKA_CERTIFICATE[2] = {0xBF, 0x21}; 
static const BYTE GP211_GET_DATA_CA_KLOC_KID_KVN[2] = {0x00, 0x83}; 
static const BYTE GP211_GET_DATA_SUPPORTED_CA_KLOC_IDENTIFIERS[2] = {0xFF, 0x33}; 
static const BYTE GP211_GET_DATA_SUPPORTED_CA_KLCC_IDENTIFIERS[2] = {0xFF, 0x34}; 
 
static const BYTE GP211_GET_DATA_CARD_IMAGE_NUMBER[2] = {0x00, 0x45}; 
static const BYTE GP211_GET_DATA_SECURITY_DOMAIN_IMAGE_NUMBER[2] = {0x00, 0x45}; 
 
static const BYTE GP211_GET_DATA_ISSUER_SECURITY_DOMAIN_AID[2] = {0x00, 0x4F}; 
static const BYTE GP211_GET_DATA_SECURITY_DOMAIN_AID[2] = {0x00, 0x4F}; 
static const BYTE GP211_GET_DATA_LIST_OF_APPLICATIONS[2] = {0x2F, 0x00}; 
static const BYTE GP211_GET_DATA_EXTENDED_CARD_RESOURCES[2] = {0xFF, 0x21}; 
 
static const BYTE GP211_GET_DATA_CARD_DATA[2] = {0x00, 0x66}; 
static const BYTE GP211_GET_DATA_SECURITY_DOMAIN_MANAGEMENT_DATA[2] = {0x00, 0x66}; 
static const BYTE GP211_GET_DATA_CARD_CAPABILITY_INFORMATION[2] = {0x00, 0x67}; 
static const BYTE GP211_GET_DATA_SEQUENCE_COUNTER_DEFAULT_KEY_VERSION[2] = {0x00, 0xC1}; 
static const BYTE GP211_GET_DATA_CONFIRMATION_COUNTER[2] = {0x00, 0xC2}; 
static const BYTE GP211_GET_DATA_FREE_EEPROM_MEMORY_SPACE[2] = {0x00, 0xC6}; 
static const BYTE GP211_GET_DATA_FREE_COR_RAM[2] = {0x00, 0xC7}; 
static const BYTE GP211_GET_DATA_DIVERSIFICATION_DATA[2] = {0x00, 0xCF}; 
 
static const BYTE GP211_GET_DATA_KEY_INFORMATION_TEMPLATE[2] = {0x00, 0xE0};
 
static const BYTE GP211_GET_DATA_CPLC_PERSONALIZATION_DATE[2] = {0x9F, 0x66}; 
static const BYTE GP211_GET_DATA_CPLC_PRE_PERSONALIZATION_DATE[2] = {0x9F, 0x67}; 
static const BYTE GP211_GET_DATA_CPLC_ICC_MANUFACTURER_EMBEDDING_DATE[2] = {0x9F, 0x68}; 
static const BYTE GP211_GET_DATA_CPLC_MODULE_FABRICATOR_PACKAGING_DATE[2] = {0x9F, 0x69}; 
static const BYTE GP211_GET_DATA_CPLC_FABRICATION_DATE_SERIAL_NUMBER_BATCH_IDENTIFIER[2] = {0x9F, 0x6A}; 
static const BYTE GP211_GET_DATA_CPLC_WHOLE_CPLC[2] = {0x9F, 0x7F};
 
static const BYTE GP211_GET_DATA_FCI_DATA[2] = {0xBF, 0x0C}; 
 
static const BYTE GP211_GET_DATA_PROTOCOL[2] = {0xDF, 0x70}; 
static const BYTE GP211_GET_DATA_ATR_HISTRORICAL_BYTES[2] = {0xDF, 0x71}; 
 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_INITIALIZATION_FINGERPRINT[2] = {0xDF, 0x76}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_INITIALIZATION_DATA[2] = {0xDF, 0x77}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_PRODUCTION_KEY_INDEX[2] = {0xDF, 0x78}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_PROTOCOL_VERSION[2] = {0xDF, 0x79}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_CHECKSUM[2] = {0xDF, 0x7A}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_SOFTWARE_VERSION[2] = {0xDF, 0x7B}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_RFU[2] = {0xDF, 0x7C}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_PROFILE_WITH_PROFILE_VERSION[2] = {0xDF, 0x7D}; 
static const BYTE GP211_GET_DATA_EF_PROD_DATA_LOCATION_MACHINE_DATE_TIME[2] = {0xDF, 0x7E}; 
 
static const BYTE GP211_GET_DATA_WHOLE_EF_PROD[2] = {0xDF, 0x7F}; 
 
static const BYTE GP211_GET_DATA_KEY_DIVERSIFICATION[2] = {0x00, 0xCF}; 
 
// OP 2.0.1' specifific
 
static const BYTE OP201_CARD_MANAGER_AID[7] = {0xA0, 0x00, 0x00, 0x00, 0x03, 0x00, 0x00}; 
 
#define OP201_LIFE_CYCLE_LOAD_FILE_LOGICALLY_DELETED 0x00 
#define OP201_LIFE_CYCLE_LOAD_FILE_LOADED 0x01 
#define OP201_LIFE_CYCLE_CARD_MANAGER_OP_READY 0x01 
#define OP201_LIFE_CYCLE_CARD_MANAGER_INITIALIZED 0x07 
#define OP201_LIFE_CYCLE_CARD_MANAGER_SECURED 0x0f 
#define OP201_LIFE_CYCLE_CARD_MANAGER_CM_LOCKED 0x7f 
#define OP201_LIFE_CYCLE_CARD_MANAGER_TERMINATED 0xff 
#define OP201_LIFE_CYCLE_APPLICATION_LOGICALLY_DELETED 0x00 
#define OP201_LIFE_CYCLE_APPLICATION_INSTALLED 0x03 
#define OP201_LIFE_CYCLE_APPLICATION_SELECTABLE 0x07 
#define OP201_LIFE_CYCLE_APPLICATION_PERSONALIZED 0x0f 
#define OP201_LIFE_CYCLE_APPLICATION_BLOCKED 0x7f 
#define OP201_LIFE_CYCLE_APPLICATION_LOCKED 0xff 
 
typedef enum {
        OP201_SECURITY_DOMAIN = 1u << 7, 
        OP201_DAP_VERIFICATION = 0xC0, 
        OP201_DELEGATED_MANAGEMENT = 0xA0, 
        OP201_CARD_MANAGER_LOCK_PRIVILEGE = 1u << 4, 
        OP201_CARD_MANAGER_TERMINATE_PRIVILEGE = 1u << 3, 
        OP201_DEFAULT_SELECTED = 1u << 2, 
        OP201_PIN_CHANGE_PRIVILEGE = 1u << 1, 
        OP201_MANDATED_DAP_VERIFICATION = 0xD0, 
} OP201_APPLICATION_PRIVILEGES;
 
#define OP201_STATUS_APPLICATIONS 0x40 
#define OP201_STATUS_CARD_MANAGER 0x80 
#define OP201_STATUS_LOAD_FILES 0x20 
 
 
// Some possible identifiers to retrieve card data with get_data() and put_data().
static const BYTE OP201_GET_DATA_ISSUER_BIN[2] = {0x00, 0x42}; 
static const BYTE OP201_GET_DATA_APPLICATION_PROVIDER_IDENTIFICATION_NUMBER[2] = {0x00, 0x42}; 
 
static const BYTE OP201_GET_DATA_ISSUER_DATA[2] = {0x00, 0x45}; 
static const BYTE OP201_GET_DATA_SECURITY_DOMAIN_IMAGE_NUMBER[2] = {0x00, 0x45}; 
 
static const BYTE OP201_GET_DATA_CARD_MANAGER_AID[2] = {0x00, 0x4F}; 
static const BYTE OP201_GET_DATA_SECURITY_DOMAIN_AID[2] = {0x00, 0x4F}; 
 
static const BYTE OP201_GET_DATA_CARD_RECOGNITION_DATA[2] = {0x00, 0x66}; 
static const BYTE OP201_GET_DATA_SEQUENCE_COUNTER_DEFAULT_KEY_VERSION[2] = {0x00, 0xC1}; 
static const BYTE OP201_GET_DATA_CONFIRMATION_COUNTER[2] = {0x00, 0xC2}; 
static const BYTE OP201_GET_DATA_FREE_EEPROM_MEMORY_SPACE[2] = {0x00, 0xC6}; 
static const BYTE OP201_GET_DATA_FREE_COR_RAM[2] = {0x00, 0xC7}; 
static const BYTE OP201_GET_DATA_DIVERSIFICATION_DATA[2] = {0x00, 0xCF}; 
 
static const BYTE OP201_GET_DATA_KEY_INFORMATION_TEMPLATE[2] = {0x00, 0xE0};
 
static const BYTE OP201_GET_DATA_CPLC_PERSONALIZATION_DATE[2] = {0x9F, 0x66}; 
static const BYTE OP201_GET_DATA_CPLC_PRE_PERSONALIZATION_DATE[2] = {0x9F, 0x67}; 
static const BYTE OP201_GET_DATA_CPLC_ICC_MANUFACTURER_EMBEDDING_DATE[2] = {0x9F, 0x68}; 
static const BYTE OP201_GET_DATA_CPLC_MODULE_FABRICATOR_PACKAGING_DATE[2] = {0x9F, 0x69}; 
static const BYTE OP201_GET_DATA_CPLC_FABRICATION_DATE_SERIAL_NUMBER_BATCH_IDENTIFIER[2] = {0x9F, 0x6A}; 
static const BYTE OP201_GET_DATA_CPLC_WHOLE_CPLC[2] = {0x9F, 0x7F}; 
 
static const BYTE OP201_GET_DATA_FCI_DATA[2] = {0xBF, 0x0C}; 
 
static const BYTE OP201_GET_DATA_PROTOCOL[2] = {0xDF, 0x70}; 
static const BYTE OP201_GET_DATA_ATR_HISTRORICAL_BYTES[2] = {0xDF, 0x71}; 
 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_INITIALIZATION_FINGERPRINT[2] = {0xDF, 0x76}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_INITIALIZATION_DATA[2] = {0xDF, 0x77}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_PRODUCTION_KEY_INDEX[2] = {0xDF, 0x78}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_PROTOCOL_VERSION[2] = {0xDF, 0x79}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_CHECKSUM[2] = {0xDF, 0x7A}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_SOFTWARE_VERSION[2] = {0xDF, 0x7B}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_RFU[2] = {0xDF, 0x7C}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_PROFILE_WITH_PROFILE_VERSION[2] = {0xDF, 0x7D}; 
static const BYTE OP201_GET_DATA_EF_PROD_DATA_LOCATION_MACHINE_DATE_TIME[2] = {0xDF, 0x7E}; 
 
static const BYTE OP201_GET_DATA_WHOLE_EF_PROD[2] = {0xDF, 0x7F}; 
 
#define OPGP_DERIVATION_METHOD_NONE 0 
#define OPGP_DERIVATION_METHOD_VISA2 1 
#define OPGP_DERIVATION_METHOD_EMV_CPS11 2 
#define OPGP_DERIVATION_METHOD_VISA1 3 
 
#define GP211_HASH_SHA1 1 
#define GP211_HASH_SHA256 2 
#define GP211_HASH_SHA384 3 
#define GP211_HASH_SHA512 4 
#define GP211_HASH_SM3 5 
 
#define GP211_KEY_VERSION_TOKEN_VERIFICATION 0x70 
#define GP211_KEY_VERSION_RECEIPT_GENERATION 0x71 
#define GP211_KEY_VERSION_DAP_VERIFICATION 0x73 
#define GP211_KEY_VERSION_CASD_AND_CONFIDENTIAL_SETUP 0x74 
#define GP211_KEY_VERSION_CIPHERED_LOAD_FILE 0x75 
 
#define OPGP_WORK_UNKNOWN -1 
#define OPGP_TASK_FINISHED 1 
 
#define INIT_PROGRESS_CALLBACK_PARAMETERS(callbackParameters, callback)         if (callback != NULL) {callbackParameters.parameters = callback->parameters; \
        callbackParameters.finished = !OPGP_TASK_FINISHED;}
 
typedef struct {
        DWORD currentWork; 
        DWORD totalWork; 
        DWORD finished; 
        PVOID parameters; 
} OPGP_PROGRESS_CALLBACK_PARAMETERS;
 
typedef struct {
        void (*callback)(OPGP_PROGRESS_CALLBACK_PARAMETERS); 
        PVOID parameters; 
} OPGP_PROGRESS_CALLBACK;
 
typedef struct {
        BYTE AIDLength; 
        BYTE AID[16]; 
} OPGP_AID;
 
 
typedef struct {
        OPGP_AID aid; 
        BYTE lifeCycleState; 
        OP201_APPLICATION_PRIVILEGES privileges; 
} OP201_APPLICATION_DATA;
 
typedef struct {
        DWORD loadFileSize; 
        OPGP_AID loadFileAID; 
        BYTE numAppletAIDs; 
        OPGP_AID appletAIDs[32]; 
} OPGP_LOAD_FILE_PARAMETERS;
 
 
typedef struct {
        OPGP_AID aid; 
        BYTE lifeCycleState; 
        GP211_APPLICATION_PRIVILEGES privileges; 
        BYTE versionNumber[2]; 
        OPGP_AID associatedSecurityDomainAID; 
} GP211_APPLICATION_DATA;
 
typedef struct {
        OPGP_AID aid; 
        BYTE lifeCycleState; 
        BYTE versionNumber[2]; 
        BYTE numExecutableModules; 
        OPGP_AID executableModules[64]; 
        OPGP_AID associatedSecurityDomainAID; 
} GP211_EXECUTABLE_MODULES_DATA;
 
typedef struct {
        DWORD numInstalledApplications; 
        DWORD freeVolatileMemory; 
        DWORD freeNonVolatileMemory; 
} OPGP_EXTENDED_CARD_RESOURCE_INFORMATION;
 
typedef struct {
        USHORT icFabricator; 
        USHORT icType; 
        USHORT operatingSystemId; 
        USHORT operatingSystemReleaseDate; 
        USHORT operatingSystemReleaseLevel; 
        USHORT icFabricationDate; 
        USHORT icSerialNumberHigh; 
        USHORT icSerialNumberLow; 
        USHORT icBatchIdentifier; 
        USHORT icModuleFabricator; 
        USHORT icModulePackagingDate; 
        USHORT iccManufacturer; 
        USHORT icEmbeddingDate; 
        USHORT icPrePersonalizer; 
        USHORT icPrePersonalizationEquipmentDate; 
        DWORD icPrePersonalizationEquipmentId; 
        USHORT icPersonalizer; 
        USHORT icPersonalizationDate; 
        DWORD icPersonalizationEquipmentId; 
} OPGP_CPLC;
 
#define GP211_MAX_CARD_RECOGNITION_SCP_INFOS 16
#define GP211_MAX_CARD_RECOGNITION_SCP_IMPL_OID_BYTES 8
 
/* SCPi bit flags for card-recognition-data SCP implementation options. */
#define GP211_SCP02_SCPI_THREE_KEYS 0x01 
#define GP211_SCP02_SCPI_MODE_MASK 0x0E 
#define GP211_SCP02_SCPI_MODE_EXPLICIT 0x04 
#define GP211_SCP02_SCPI_MODE_IMPLICIT 0x0A 
#define GP211_SCP02_SCPI_CMAC_ICV_ENCRYPTION 0x10 
#define GP211_SCP02_SCPI_PSEUDO_RANDOM_CARD_CHALLENGE 0x40 
 
#define GP211_SCP03_SCPI_PSEUDO_RANDOM_CARD_CHALLENGE 0x10 
#define GP211_SCP03_SCPI_RESPONSE_MASK 0x60 
#define GP211_SCP03_SCPI_RESPONSE_NONE 0x00 
#define GP211_SCP03_SCPI_RESPONSE_R_MAC 0x20 
#define GP211_SCP03_SCPI_RESPONSE_R_ENC_R_MAC 0x60 
 
#define GP211_SCP11_SCPI_B1_SECOND_BYTE_PRESENT 0x80 
#define GP211_SCP11_SCPI_B1_S16_MODE 0x40 
#define GP211_SCP11_SCPI_B1_SCP11C_AUTH_BF20 0x20 
#define GP211_SCP11_SCPI_B1_SCP11C_SUPPORTED 0x10 
#define GP211_SCP11_SCPI_B1_CERT_CHAIN_SUPPORTED 0x08 
#define GP211_SCP11_SCPI_B1_SD_PERSISTENT_PK_OCE_ECKA 0x04 
#define GP211_SCP11_SCPI_B1_SCP11B_SUPPORTED 0x02 
#define GP211_SCP11_SCPI_B1_SCP11A_SUPPORTED 0x01 
 
#define GP211_SCP11_SCPI_B2_GP_LEGACY_CERT_NOT_SUPPORTED 0x04 
#define GP211_SCP11_SCPI_B2_X509_CERT_SUPPORTED 0x02 
#define GP211_SCP11_SCPI_B2_SCP11A_AUTH_BF20 0x01 
 
typedef struct {
        char version[16]; 
        BYTE scp[GP211_MAX_CARD_RECOGNITION_SCP_INFOS]; 
        BYTE scpImpl[GP211_MAX_CARD_RECOGNITION_SCP_INFOS]; 
        DWORD scpImplValue[GP211_MAX_CARD_RECOGNITION_SCP_INFOS]; 
        BYTE scpImplOidBytes[GP211_MAX_CARD_RECOGNITION_SCP_INFOS][GP211_MAX_CARD_RECOGNITION_SCP_IMPL_OID_BYTES]; 
        BYTE scpImplOidBytesLength[GP211_MAX_CARD_RECOGNITION_SCP_INFOS]; 
        DWORD scpLength; 
        char cardConfigurationDetailsOid[128]; 
        DWORD cardConfigurationDetailsOidLength; 
        BYTE cardConfigurationDetails[64]; 
        DWORD cardConfigurationDetailsLength; 
        char cardChipDetailsOid[128]; 
        DWORD cardChipDetailsOidLength; 
        BYTE cardChipDetails[64]; 
        DWORD cardChipDetailsLength; 
        char issuerSecurityDomainsTrustPointCertificateInformationOid[128]; 
        DWORD issuerSecurityDomainsTrustPointCertificateInformationOidLength; 
        BYTE issuerSecurityDomainsTrustPointCertificateInformation[64]; 
        DWORD issuerSecurityDomainsTrustPointCertificateInformationLength; 
        char issuerSecurityDomainCertificateInformationOid[128]; 
        DWORD issuerSecurityDomainCertificateInformationOidLength; 
        BYTE issuerSecurityDomainCertificateInformation[64]; 
        DWORD issuerSecurityDomainCertificateInformationLength; 
} GP211_CARD_RECOGNITION_DATA;
 
#define GP211_MAX_CARD_CAPABILITY_SCP_INFOS 16
#define GP211_MAX_CARD_CAPABILITY_SCP_OPTIONS 16
#define GP211_MAX_CARD_CAPABILITY_TLS_CIPHER_SUITES 16
#define GP211_MAX_CARD_CAPABILITY_LFDBH_ALGORITHMS 8
#define GP211_MAX_CARD_CAPABILITY_CIPHER_SUITES 32
#define GP211_MAX_CARD_CAPABILITY_KEY_PARAMETER_REFERENCES 128
#define GP211_MAX_CARD_CAPABILITY_ELF_UPGRADE 32
 
#define GP211_SCP_SUPPORTED_KEY_SIZE_128 0x01
#define GP211_SCP_SUPPORTED_KEY_SIZE_192 0x02
#define GP211_SCP_SUPPORTED_KEY_SIZE_256 0x04
 
#define GP211_LFDB_ENCRYPTION_3DES_16B_KEY 0x01
#define GP211_LFDB_ENCRYPTION_AES_128 0x02
#define GP211_LFDB_ENCRYPTION_AES_192 0x04
#define GP211_LFDB_ENCRYPTION_AES_256 0x08
#define GP211_LFDB_ENCRYPTION_SM4 0x10
#define GP211_LFDB_ENCRYPTION_ICV_SUPPORTED 0x80
 
#define GP211_SIGNATURE_CS_RSA_1024_SHA1 0x0100
#define GP211_SIGNATURE_CS_RSA_PSS_SHA256 0x0200
#define GP211_SIGNATURE_CS_DES_MAC_16B 0x0400
#define GP211_SIGNATURE_CS_CMAC_AES_128 0x0800
#define GP211_SIGNATURE_CS_CMAC_AES_192 0x1000
#define GP211_SIGNATURE_CS_CMAC_AES_256 0x2000
#define GP211_SIGNATURE_CS_ECDSA_256_SHA256 0x4000
#define GP211_SIGNATURE_CS_ECDSA_384_SHA384 0x8000
 
#define GP211_SIGNATURE_CS_ECDSA_512_SHA512 0x0001
#define GP211_SIGNATURE_CS_ECDSA_521_SHA512 0x0002
#define GP211_SIGNATURE_CS_SM2 0x0004
 
#define GP211_SCP11_CERTIFICATE_MAX_ID_LENGTH 16
#define GP211_SCP11_CERTIFICATE_MAX_DATE_LENGTH 4
#define GP211_SCP11_CERTIFICATE_MAX_PUBLIC_KEY_LENGTH 160
#define GP211_SCP11_CERTIFICATE_MAX_KEY_PARAMETER_REFERENCE_LENGTH 2
#define GP211_SCP11_CERTIFICATE_MAX_SIGNATURE_LENGTH 160
#define GP211_SCP11_CERTIFICATE_MAX_DISCRETIONARY_DATA_LENGTH 127
#define GP211_SCP11_CERTIFICATE_MAX_AUTHORIZATIONS_LENGTH 1024
 
static const BYTE GP211_SCP11_KEY_USAGE_DIGITAL_SIGNATURE_VERIFICATION[1] = {0x82}; 
static const BYTE GP211_SCP11_KEY_USAGE_KEY_AGREEMENT[2] = {0x00, 0x80}; 
 
#define GP211_ELF_UPGRADE_SINGLE 0x00
#define GP211_ELF_UPGRADE_MULTI 0x01
 
typedef struct {
        BYTE certificateSerialNumber[GP211_SCP11_CERTIFICATE_MAX_ID_LENGTH]; 
        DWORD certificateSerialNumberLength; 
        BYTE authorityIdentifier[GP211_SCP11_CERTIFICATE_MAX_ID_LENGTH]; 
        DWORD authorityIdentifierLength; 
        BYTE subjectIdentifier[GP211_SCP11_CERTIFICATE_MAX_ID_LENGTH]; 
        DWORD subjectIdentifierLength; 
        BYTE keyUsage[2]; 
        DWORD keyUsageLength; 
        BOOL effectiveDatePresent; 
        BYTE effectiveDate[GP211_SCP11_CERTIFICATE_MAX_DATE_LENGTH]; 
        BYTE expirationDate[GP211_SCP11_CERTIFICATE_MAX_DATE_LENGTH]; 
        DWORD expirationDateLength; 
        USHORT discretionaryDataTag; 
        BYTE discretionaryData[GP211_SCP11_CERTIFICATE_MAX_DISCRETIONARY_DATA_LENGTH]; 
        DWORD discretionaryDataLength; 
        BOOL authorizationsPresent; 
        BYTE authorizations[GP211_SCP11_CERTIFICATE_MAX_AUTHORIZATIONS_LENGTH]; 
        DWORD authorizationsLength; 
        BYTE publicKey[GP211_SCP11_CERTIFICATE_MAX_PUBLIC_KEY_LENGTH]; 
        DWORD publicKeyLength; 
        BYTE keyParameterReference[GP211_SCP11_CERTIFICATE_MAX_KEY_PARAMETER_REFERENCE_LENGTH]; 
        DWORD keyParameterReferenceLength; 
        BYTE signature[GP211_SCP11_CERTIFICATE_MAX_SIGNATURE_LENGTH]; 
        DWORD signatureLength; 
} GP211_SCP11_CERTIFICATE;
 
typedef struct {
        BYTE scpIdentifier; 
        BYTE scpOptions[GP211_MAX_CARD_CAPABILITY_SCP_OPTIONS]; 
        DWORD scpOptionsLength; 
        BYTE scpOptionsMask[GP211_MAX_CARD_CAPABILITY_SCP_OPTIONS]; 
        DWORD scpOptionsMaskLength; 
        BYTE supportedKeySizes; 
        BYTE tlsCipherSuites[GP211_MAX_CARD_CAPABILITY_TLS_CIPHER_SUITES]; 
        DWORD tlsCipherSuitesLength; 
        BYTE maxPskLength; 
} GP211_SCP_INFORMATION;
 
typedef struct {
        GP211_SCP_INFORMATION scpInformation[GP211_MAX_CARD_CAPABILITY_SCP_INFOS]; 
        DWORD scpInformationLength; 
        BYTE ssdPrivileges[3]; 
        BYTE appPrivileges[3]; 
        BYTE lfdbhAlgorithms[GP211_MAX_CARD_CAPABILITY_LFDBH_ALGORITHMS]; 
        DWORD lfdbhAlgorithmsLength; 
        BYTE lfdbencryptionCipherSuites; 
        USHORT tokenCipherSuites; 
        USHORT receiptCipherSuites; 
        USHORT dapCipherSuites; 
        BYTE keyParameterReferenceList[GP211_MAX_CARD_CAPABILITY_KEY_PARAMETER_REFERENCES]; 
        DWORD keyParameterReferenceListLength; 
        BYTE elfUpgrade; 
        BOOL tokenIdentifierDenyList; 
        BOOL securityDomainSelfRemoval; 
} GP211_CARD_CAPABILITY_INFORMATION;
 
// UICC System Specific Parameters (ETSI TS 102 226, sect. 8.2.1.3.2.2).
#define GP211_UICC_ACCESS_DOMAIN_FULL_ACCESS 0x00 
#define GP211_UICC_ACCESS_DOMAIN_UICC_ACCESS 0x02 
#define GP211_UICC_ACCESS_DOMAIN_NO_ACCESS 0xFF 
#define GP211_UICC_MSL_PARAMETER_MINIMUM_SPI1 0x01 
#define GP211_UICC_TOOLKIT_MAX_TIMERS 0x08 
#define GP211_UICC_TOOLKIT_MAX_CHANNELS 0x07 
#define GP211_UICC_TOOLKIT_MAX_SERVICES 0x08 
#define GP211_UICC_MAX_MENU_ENTRIES 8 
#define GP211_UICC_MAX_ACCESS_RULES 4 
#define GP211_UICC_MAX_TAR_VALUES 4 
#define GP211_UICC_TOOLKIT_DAP_MAX_LENGTH 16 
#define GP211_UICC_ACCESS_DOMAIN_DAP_MAX_LENGTH 16 
#define GP211_SPI1_RC_CC_DS_MASK 0x03 
#define GP211_SPI1_RC_CC_DS_NONE 0x00 
#define GP211_SPI1_RC_CC_DS_RC 0x01 
#define GP211_SPI1_RC_CC_DS_CC 0x02 
#define GP211_SPI1_RC_CC_DS_DS 0x03 
#define GP211_SPI1_CIPHERING 0x04 
#define GP211_SPI1_COUNTER_MASK 0x18 
#define GP211_SPI1_COUNTER_NONE 0x00 
#define GP211_SPI1_COUNTER_AVAILABLE 0x08 
#define GP211_SPI1_COUNTER_HIGHER_THAN_RE 0x10 
#define GP211_SPI1_COUNTER_INCREMENT_RE 0x18 
#define GP211_SPI1_RFU_MASK 0xE0 
#define GP211_SD_MAX_SCP 8 
#define GP211_SD_PARAM_TAG_SCP 0x81 
#define GP211_SD_PARAM_TAG_ACCEPT_EXTRACTION 0x82 
#define GP211_SD_PARAM_TAG_ACCEPT_DELETE 0x83 
#define GP211_SD_PARAM_TAG_PERSONALIZED 0x84 
#define GP211_SD_PARAM_TAG_CASD_CAPABILITY 0x86 
#define GP211_SD_PARAM_TAG_ACCEPT_GLOBAL_DELETE 0x87 
#define GP211_SD_PARAM_LEN_SCP 0x02 
#define GP211_SD_PARAM_LEN_ACCEPT_DELETE 0x01 
#define GP211_SD_PARAM_LEN_CASD_CAPABILITY 0x02 
#define GP211_SD_PARAM_LEN_PERSONALIZED 0x00 
#define GP211_SD_PARAM_LEN_ACCEPT_MIN 0x01 
#define GP211_SD_PARAM_LEN_ACCEPT_MAX 0x02 
#define GP211_SD_ACCEPT_NONE 0x00 
#define GP211_SD_ACCEPT_ANCESTOR_AM 0x80 
#define GP211_SD_ACCEPT_HIERARCHY_AM 0xC0 
#define GP211_SD_ACCEPT_ISD 0x20 
#define GP211_SD_ACCEPT_DM_UNDER_ANCESTOR_AM 0x08 
#define GP211_SD_ACCEPT_ALL_AM 0xF0 
 
typedef struct {
        BYTE position; 
        BYTE identifier; 
} GP211_UICC_TOOLKIT_MENU_ENTRY;
 
typedef struct {
        BYTE priority; 
        BYTE maxTimers; 
        BYTE maxTextLength; 
        BYTE maxMenuEntries; 
        GP211_UICC_TOOLKIT_MENU_ENTRY menuEntries[GP211_UICC_MAX_MENU_ENTRIES]; 
        BYTE maxChannels; 
        BYTE mslData; 
        BYTE tarValues[GP211_UICC_MAX_TAR_VALUES * 3]; 
        BYTE tarValuesLength; 
        BYTE maxServices; 
} GP211_UICC_TOOLKIT_APP_PARAMS;
 
typedef struct {
        BYTE aidLength; 
        BYTE aid[16]; 
        BYTE accessDomainParameter; 
        BYTE accessDomainData[3]; 
        BYTE accessDomainDap[GP211_UICC_ACCESS_DOMAIN_DAP_MAX_LENGTH]; 
        BYTE accessDomainDapLength; 
} GP211_UICC_ACCESS_RULE;
 
typedef struct {
        GP211_UICC_ACCESS_RULE rules[GP211_UICC_MAX_ACCESS_RULES]; 
        BYTE rulesLength; 
} GP211_UICC_ACCESS_PARAMS;
 
typedef struct {
        BOOL toolkitParamsPresent; 
        GP211_UICC_TOOLKIT_APP_PARAMS toolkitParams; 
        BYTE toolkitParametersDap[GP211_UICC_TOOLKIT_DAP_MAX_LENGTH]; 
        BYTE toolkitParametersDapLength; 
        BOOL accessParamsPresent; 
        GP211_UICC_ACCESS_PARAMS accessParams; 
        BOOL adminAccessParamsPresent; 
        GP211_UICC_ACCESS_PARAMS adminAccessParams; 
} GP211_UICC_SYSTEM_SPECIFIC_PARAMS;
 
typedef struct {
        BYTE priority; 
        BYTE maxTimers; 
        BYTE maxTextLength; 
        BYTE maxMenuEntries; 
        GP211_UICC_TOOLKIT_MENU_ENTRY menuEntries[GP211_UICC_MAX_MENU_ENTRIES]; 
        BYTE maxChannels; 
        BYTE mslData; 
        BYTE tarValues[GP211_UICC_MAX_TAR_VALUES * 3]; 
        BYTE tarValuesLength; 
} GP211_SIM_TOOLKIT_PARAMS;
 
typedef struct {
        BYTE accessDomainParameter; 
        BYTE accessDomainData[3]; 
        GP211_SIM_TOOLKIT_PARAMS toolkitParams; 
} GP211_SIM_SPECIFIC_PARAMS;
 
typedef struct {
        BYTE scpIdentifier; 
        BYTE scpImpl; 
} GP211_SD_SCP_ENTRY;
 
typedef struct {
        GP211_SD_SCP_ENTRY scpEntries[GP211_SD_MAX_SCP]; 
        BYTE scpEntriesLength; 
        BYTE acceptExtraditionHere[2]; 
        BYTE acceptExtraditionHereLength; 
        BYTE acceptDeletion; 
        BYTE acceptDeletionLength; 
        BOOL personalizedStatePresent; 
        BYTE casdCapabilityInfo[2]; 
        BYTE acceptExtraditionAway[2]; 
        BYTE acceptExtraditionAwayLength; 
} GP211_SD_INSTALL_PARAMS;
 
OPGP_API
OPGP_ERROR_STATUS OPGP_select_application(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, PBYTE AID, DWORD AIDLength);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_get_extended_card_resources_information(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                   OPGP_EXTENDED_CARD_RESOURCE_INFORMATION *extendedCardResourceInformation);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_get_cplc(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                OPGP_CPLC *cplc);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_parse_cplc(const BYTE *data, DWORD dataLength, OPGP_CPLC *cplc);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_parse_extended_card_resources_information(const BYTE *data, DWORD dataLength,
                                                                  OPGP_EXTENDED_CARD_RESOURCE_INFORMATION *extendedCardResourceInformation);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_status(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                BYTE cardElement, BYTE format, GP211_APPLICATION_DATA *applData,
                                GP211_EXECUTABLE_MODULES_DATA *executableData, PDWORD dataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_set_status(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, BYTE statusType, PBYTE AID, DWORD AIDLength, BYTE lifeCycleState);
 
OPGP_API
OPGP_ERROR_STATUS GP211_mutual_authentication(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                           PBYTE baseKeyOrStaticOcePrivateKey, PBYTE S_ENC, PBYTE S_MAC,
                           PBYTE DEK, DWORD keyLength, BYTE keySetVersion,
                           BYTE keyIndex, BYTE secureChannelProtocol,
                           BYTE secureChannelProtocolImpl,
                           BYTE securityLevel, BYTE derivationMethod,
                           PBYTE certOceEcka, DWORD certOceEckaLength,
                           PBYTE sdPublicKeyOverride, DWORD sdPublicKeyOverrideLength,
                           OPGP_STRING sdPublicKeyFileName,
                           GP211_SECURITY_INFO *secInfo);
 
OPGP_API
OPGP_ERROR_STATUS GP211_init_implicit_secure_channel(PBYTE AID, DWORD AIDLength, BYTE baseKey[16],
                                                                  BYTE S_ENC[16], BYTE S_MAC[16], BYTE DEK[16],
                                                                  BYTE secureChannelProtocolImpl, BYTE sequenceCounter[2],
                                                                  GP211_SECURITY_INFO *secInfo);
 
OPGP_API
OPGP_ERROR_STATUS GP211_close_implicit_secure_channel(GP211_SECURITY_INFO *secInfo);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                          BYTE identifier[2], PBYTE recvBuffer, PDWORD recvBufferLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_ecka_certificate(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                          BYTE keyVersionNumber, BYTE keyIdentifier, PBYTE recvBuffer, PDWORD recvBufferLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_ca_kloc_kid_kvn(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                          PBYTE caKlocIdentifier, DWORD caKlocIdentifierLength,
                          BYTE *keyIdentifier, BYTE *keyVersionNumber);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_supported_ca_identifiers(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                          GP211_SECURITY_INFO *secInfo, BOOL returnCaKlccIdentifiers,
                          PBYTE recvBuffer, PDWORD recvBufferLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_perform_security_operation(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                          BYTE caKlocKeyVersionNumber, BYTE caKlocKeyIdentifier,
                          PBYTE certificateData, DWORD certificateDataLength,
                          BOOL moreCertificatesExpected);
 
OPGP_API
OPGP_ERROR_STATUS GP211_perform_security_operation_certificate_chain(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                          GP211_SECURITY_INFO *secInfo,
                          BYTE caKlocKeyVersionNumber, BYTE caKlocKeyIdentifier,
                          PBYTE certificateChainData, DWORD certificateChainDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_diversification_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                          PBYTE recvBuffer, PDWORD recvBufferLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_data_iso7816_4(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, BYTE identifier[2], PBYTE recvBuffer, PDWORD recvBufferLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_card_recognition_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, GP211_CARD_RECOGNITION_DATA *cardData);
 
OPGP_API
OPGP_ERROR_STATUS GP211_parse_card_recognition_data(const BYTE *data, DWORD dataLength, GP211_CARD_RECOGNITION_DATA *cardData);
 
OPGP_API
OPGP_ERROR_STATUS GP211_parse_scp11_certificate(PBYTE certificateData, DWORD certificateDataLength,
                          GP211_SCP11_CERTIFICATE *certificate);
 
OPGP_API
OPGP_ERROR_STATUS GP211_parse_certificate_store(const BYTE *certificateStoreData, DWORD certificateStoreDataLength,
                          PBYTE parsedCertificateStore, PDWORD parsedCertificateStoreLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_build_scp11_certificate(GP211_SCP11_CERTIFICATE *certificate,
                          OPGP_STRING subjectPublicKeyFileName, char *subjectPublicKeyPassPhrase,
                          OPGP_STRING signingPrivateKeyFileName, char *signingPrivateKeyPassPhrase,
                          PBYTE certificateData, PDWORD certificateDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_card_capability_information(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, GP211_CARD_CAPABILITY_INFORMATION *cardCapabilityInfo);
 
OPGP_API
OPGP_ERROR_STATUS GP211_parse_card_capability_information(const BYTE *data, DWORD dataLength,
                                                          GP211_CARD_CAPABILITY_INFORMATION *cardCapabilityInfo);
 
OPGP_API
OPGP_ERROR_STATUS GP211_build_card_recognition_data(const GP211_CARD_RECOGNITION_DATA *cardData,
                                                         PBYTE data, PDWORD dataLength);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_build_bcd_encoding(const char *numericString, PBYTE bcdData, PDWORD bcdDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_secure_channel_protocol_details(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                                 BYTE *secureChannelProtocol, BYTE *secureChannelProtocolImpl);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_sequence_counter(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                                                  GP211_SECURITY_INFO *secInfo, DWORD *sequenceCounter);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_confirmation_counter(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                                                  GP211_SECURITY_INFO *secInfo, DWORD *confirmationCounter);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                          BYTE identifier[2], PBYTE dataObject, DWORD dataObjectLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_pin_change(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                BYTE tryLimit, PBYTE newPIN, DWORD newPINLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_symmetric_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                  BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, BYTE key[32], DWORD keyLength, BYTE keyType);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_aes_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                  BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, BYTE aesKey[32], DWORD keyLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_3des_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                  BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, BYTE _3DESKey[16]);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_rsa_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_ecc_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_ecc_key_with_curve_parameter_reference(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                                 GP211_SECURITY_INFO *secInfo, BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion,
                                 OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_ecc_private_key_with_curve_parameter_reference(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                                 GP211_SECURITY_INFO *secInfo, BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion,
                                 BYTE privateKey[32], DWORD privateKeyLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_asymmetric_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, OPGP_STRING PEMKeyFileName, char *passPhrase, BYTE keyType);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_secure_channel_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                         BYTE keySetVersion, BYTE newKeySetVersion, PBYTE baseKey,
                                                         PBYTE newS_ENC, PBYTE newS_MAC, PBYTE newDEK, DWORD keyLength, BYTE keyType);
 
OPGP_API
OPGP_ERROR_STATUS GP211_delete_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                BYTE keySetVersion, BYTE keyIndex);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_key_information_templates(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                   BYTE keyInformationTemplate,
                                                                   GP211_KEY_INFORMATION *keyInformation, PDWORD keyInformationLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_delete_application(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                   OPGP_AID *AIDs, DWORD AIDsLength,
                                   GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable,
                                   PBYTE deleteToken, DWORD deleteTokenLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_load(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                          PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                          PBYTE securityDomainAID,
                                          DWORD securityDomainAIDLength, PBYTE loadFileDataBlockHash, DWORD loadFileDataBlockHashLength,
                                          PBYTE loadToken, DWORD loadTokenLength,
                                          DWORD nonVolatileCodeSpaceLimit, DWORD volatileDataSpaceLimit,
                                          DWORD nonVolatileDataSpaceLimit);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_extradition_token_signature_data(PBYTE securityDomainAID,
                                                                                  DWORD securityDomainAIDLength,
                                                                                  PBYTE applicationAID, DWORD applicationAIDLength,
                                                                                  PBYTE extraditionTokenSignatureData,
                                                                                  PDWORD extraditionTokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_load_token_signature_data(PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                                   PBYTE securityDomainAID,
                                                                   DWORD securityDomainAIDLength, PBYTE loadFileDataBlockHash,
                                                                   DWORD loadFileDataBlockHashLength,
                                                                   DWORD nonVolatileCodeSpaceLimit, DWORD volatileDataSpaceLimit,
                                                                   DWORD nonVolatileDataSpaceLimit, PBYTE loadTokenSignatureData,
                                                                   PDWORD loadTokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_install_token_signature_data(BYTE P1, PBYTE executableLoadFileAID,
                                                                          DWORD executableLoadFileAIDLength,
                                                                          PBYTE executableModuleAID, DWORD executableModuleAIDLength,
                                                                          PBYTE applicationAID, DWORD applicationAIDLength,
                                                                          DWORD applicationPrivileges, DWORD volatileDataSpaceLimit,
                                                                          DWORD nonVolatileDataSpaceLimit,
                                                                          PBYTE installParameters, DWORD installParametersLength,
                                                                          PBYTE sdParameters, DWORD sdParametersLength,
                                                                          PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                                          PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                                          PBYTE installTokenSignatureData, PDWORD installTokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_registry_update_token_signature_data(PBYTE securityDomainAID,
                                                                                  DWORD securityDomainAIDLength,
                                                                                  PBYTE applicationAID, DWORD applicationAIDLength,
                                                                                  DWORD applicationPrivileges,
                                                                                  PBYTE registryUpdateParameters, DWORD registryUpdateParametersLength,
                                                                                  PBYTE tokenSignatureData,
                                                                                  PDWORD tokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_get_delete_token_signature_data(OPGP_AID *AIDs, DWORD AIDsLength,
                                                                                  PBYTE deleteTokenSignatureData,
                                                                                  PDWORD deleteTokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_load_token(PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                  PBYTE securityDomainAID,
                                                  DWORD securityDomainAIDLength, PBYTE loadFileDataBlockHash,
                                                  DWORD loadFileDataBlockHashLength,
                                                  DWORD nonVolatileCodeSpaceLimit, DWORD volatileDataSpaceLimit,
                                                  DWORD nonVolatileDataSpaceLimit, PBYTE loadToken, PDWORD loadTokenLength,
                                                  OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_install_token(BYTE P1, PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                         PBYTE executableModuleAID,
                                                         DWORD executableModuleAIDLength, PBYTE applicationAID,
                                                         DWORD applicationAIDLength, DWORD applicationPrivileges,
                                                         DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                         PBYTE installParameters, DWORD installParametersLength,
                                                         PBYTE sdParameters, DWORD sdParametersLength,
                                                         PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                         PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                         PBYTE installToken, PDWORD installTokenLength,
                                                         OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_extradition_token(PBYTE securityDomainAID,
                                                                                  DWORD securityDomainAIDLength,
                                                                                  PBYTE applicationAID, DWORD applicationAIDLength,
                                                                                  PBYTE extraditionToken, PDWORD extraditionTokenLength,
                                                                                  OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_update_registry_token(PBYTE securityDomainAID,
                                                                                  DWORD securityDomainAIDLength,
                                                                                  PBYTE applicationAID, DWORD applicationAIDLength,
                                                                                  DWORD applicationPrivileges,
                                                                                  PBYTE registryUpdateParameters, DWORD registryUpdateParametersLength,
                                                                                  PBYTE registryUpdateToken, PDWORD registryUpdateTokenLength,
                                                                                  OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_delete_token(PBYTE applicationOrExecutableLoadFileAID,
                                                                                  DWORD applicationOrExecutableLoadFileAIDLength,
                                                                                  PBYTE deleteToken, PDWORD deleteTokenLength,
                                                                                  OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_build_uicc_system_specific_params(GP211_UICC_SYSTEM_SPECIFIC_PARAMS *params,
                                                          PBYTE uiccSystemSpecParams, PDWORD uiccSystemSpecParamsLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_build_sim_specific_params(GP211_SIM_SPECIFIC_PARAMS *params,
                                                  PBYTE simSpecParams, PDWORD simSpecParamsLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_build_sd_parameters(GP211_SD_INSTALL_PARAMS *params,
                                                  PBYTE sdParameters, PDWORD sdParametersLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_load_file_data_block_hash(OPGP_STRING executableLoadFileName,
                                                            PBYTE hash, DWORD hashLength, BYTE hashType);
 
OPGP_API
OPGP_ERROR_STATUS GP211_load(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 GP211_DAP_BLOCK *dapBlock, DWORD dapBlockLength, OPGP_STRING executableLoadFileName,
                                 GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable, OPGP_PROGRESS_CALLBACK *callback);
 
OPGP_API
OPGP_ERROR_STATUS GP211_load_from_buffer(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 GP211_DAP_BLOCK *dapBlock, DWORD dapBlockLength,
                                 PBYTE loadFileBuffer, DWORD loadFileBufSize,
                                 GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable, OPGP_PROGRESS_CALLBACK *callback);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_install(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                 PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE executableModuleAID,
                                                 DWORD executableModuleAIDLength, PBYTE applicationAID, DWORD applicationAIDLength,
                                                 DWORD applicationPrivileges, DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                 PBYTE installParameters, DWORD installParametersLength,
                                                 PBYTE sdParameters, DWORD sdParametersLength,
                                                 PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                 PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                 PBYTE installToken, DWORD installTokenLength,
                                                 GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_make_selectable(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                 PBYTE applicationAID, DWORD applicationAIDLength,
                                                                 DWORD applicationPrivileges, PBYTE installToken, DWORD installTokenLength,
                                                                 GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_install_and_make_selectable(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                 PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE executableModuleAID,
                                                 DWORD executableModuleAIDLength, PBYTE applicationAID,
                                                 DWORD applicationAIDLength, DWORD applicationPrivileges,
                                                 DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                 PBYTE installParameters, DWORD installParametersLength,
                                                 PBYTE sdParameters, DWORD sdParametersLength,
                                                 PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                 PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                 PBYTE installToken, DWORD installTokenLength,
                                                 GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_registry_update(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                 PBYTE securityDomainAID, DWORD securityDomainAIDLength,
                                                 PBYTE applicationAID, DWORD applicationAIDLength,
                                                 DWORD applicationPrivileges,
                                                 PBYTE registryUpdateParameters, DWORD registryUpdateParametersLength,
                                                 PBYTE registryUpdateToken, DWORD registryUpdateTokenLength,
                                                 GP211_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_personalization(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo,
                                                                                         GP211_SECURITY_INFO *secInfo,
                                                 PBYTE applicationAID,
                                                 DWORD applicationAIDLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_install_for_extradition(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                          PBYTE securityDomainAID,
                                                 DWORD securityDomainAIDLength, PBYTE applicationAID,
                                                 DWORD applicationAIDLength,
                                                 PBYTE extraditionToken, DWORD extraditionTokenLength, GP211_RECEIPT_DATA *receiptData,
                                                 PDWORD receiptDataAvailable);
 
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_delegated_management_token_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                   BYTE keySetVersion,
                                                                   BYTE newKeySetVersion,
                                                                   OPGP_STRING PEMKeyFileName, char *passPhrase,
                                                                   BYTE tokenKeyType);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_dap_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                   BYTE keySetVersion,
                                                                   BYTE newKeySetVersion,
                                                                   OPGP_STRING PEMKeyFileName, char *passPhrase,
                                                                   BYTE keyType, BYTE key[32], DWORD keyLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_put_delegated_management_receipt_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                                                   BYTE keySetVersion,
                                                                   BYTE newKeySetVersion,
                                                                   BYTE receiptKey[32], DWORD keyLength, BYTE receiptKeyType);
 
OPGP_API
OPGP_ERROR_STATUS GP211_send_APDU(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                           PBYTE capdu, DWORD capduLength, PBYTE rapdu,
                           PDWORD rapduLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_DAP(BYTE loadFileDataBlockHash[64], BYTE hashLength,
                BYTE DAPCalculationKey[32], DWORD keyLength,
                PBYTE signature, PDWORD signatureLength, BYTE secureChannelProtocol);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_rsa_DAP(BYTE loadFileDataBlockHash[20], PBYTE securityDomainAID,
                                           DWORD securityDomainAIDLength, OPGP_STRING PEMKeyFileName,
                                           char *passPhrase, GP211_DAP_BLOCK *loadFileDataBlockSignature);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_rsa_schemeX_DAP(PBYTE loadFileDataBlockHash, DWORD loadFileDataBlockHashLength,
                                   OPGP_STRING PEMKeyFileName, char *passPhrase,
                                   PBYTE signature, PDWORD signatureLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_calculate_ecc_DAP(PBYTE loadFileDataBlockHash, DWORD loadFileDataBlockHashLength,
                                   OPGP_STRING PEMKeyFileName, char *passPhrase,
                                   PBYTE signature, PDWORD signatureLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_validate_delete_receipt(PBYTE receiptKey, DWORD keyLength, GP211_RECEIPT_DATA receiptData,
                                                  PBYTE AID, DWORD AIDLength,
                                                  BYTE receiptKeyType, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_validate_install_receipt(PBYTE receiptKey, DWORD keyLength, GP211_RECEIPT_DATA receiptData,
                                                   PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                   PBYTE applicationAID, DWORD applicationAIDLength,
                                                   BYTE receiptKeyType, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_validate_load_receipt(PBYTE receiptKey, DWORD keyLength, GP211_RECEIPT_DATA receiptData,
                                                PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                PBYTE securityDomainAID, DWORD securityDomainAIDLength,
                                                BYTE receiptKeyType, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_validate_extradition_receipt(PBYTE receiptKey, DWORD keyLength, GP211_RECEIPT_DATA receiptData,
                                                           PBYTE oldSecurityDomainAID, DWORD oldSecurityDomainAIDLength,
                                                           PBYTE newSecurityDomainAID, DWORD newSecurityDomainAIDLength,
                                                           PBYTE applicationOrExecutableLoadFileAID,
                                                           DWORD applicationOrExecutableLoadFileAIDLength,
                                                           BYTE receiptKeyType, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS GP211_validate_registry_update_receipt(PBYTE receiptKey, DWORD keyLength, GP211_RECEIPT_DATA receiptData,
                                                                  PBYTE oldSecurityDomainAID, DWORD oldSecurityDomainAIDLength,
                                                                  PBYTE applicationAID, DWORD applicationAIDLength,
                                                                  PBYTE newSecurityDomainAID, DWORD newSecurityDomainAIDLength,
                                                                  DWORD applicationPrivileges,
                                                                  PBYTE registryUpdateParameters, DWORD registryUpdateParametersLength,
                                                                  BYTE receiptKeyType, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_manage_channel(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO *cardInfo, GP211_SECURITY_INFO *secInfo,
                                        BYTE openClose, BYTE channelNumberToClose,
                                        BYTE *channelNumberOpened);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_select_channel(OPGP_CARD_INFO *cardInfo, BYTE channelNumber);
 
OPGP_ERROR_STATUS OPGP_calculate_key_check_value(GP211_SECURITY_INFO *secInfo,
        BYTE keyType, PBYTE keyData, DWORD keyDataLength, BYTE keyCheckValue[3]);
 
OPGP_ERROR_STATUS OPGP_encrypt_sensitive_data(GP211_SECURITY_INFO *secInfo,
        PBYTE data, DWORD dataLength,
        PBYTE encryptedData, PDWORD encryptedDataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_store_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 BYTE encryptionFlags, BYTE formatFlags, BOOL responseDataExpected, PBYTE data, DWORD dataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_store_data_ecka_certificate(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 BYTE keyVersionNumber, BYTE keyIdentifier,
                                 OPGP_STRING certificateStoreFileName);
 
OPGP_API
OPGP_ERROR_STATUS GP211_store_data_whitelist(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 BYTE keyVersionNumber, BYTE keyIdentifier,
                                 BOOL whitelistCounterPresent, USHORT whitelistCounter,
                                 PBYTE *certificateSerialNumbers, PDWORD certificateSerialNumberLengths,
                                 DWORD certificateSerialNumberCount);
 
OPGP_API
OPGP_ERROR_STATUS GP211_store_data_ca_kloc_kid_kvn(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 PBYTE caKlocIdentifier, DWORD caKlocIdentifierLength,
                                 BYTE keyIdentifier, BYTE keyVersionNumber);
 
OPGP_API
OPGP_ERROR_STATUS GP211_build_store_data_keys(BYTE scp, BYTE scpImpl, PBYTE dataEncryptionKey, DWORD dataEncryptionKeyLength,
                                 BYTE keyType, USHORT keyPurpose, PBYTE keys[], BYTE keyIds[], DWORD numKeys,
                                 DWORD keyLength, BYTE keyVersion, BYTE keyAccessCondition, PBYTE output, PDWORD outputLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_store_secure_channel_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo,
                                 PBYTE AID, DWORD AIDLength,
                                 BYTE keyType, PBYTE baseKey, PBYTE newS_ENC, PBYTE newS_MAC, PBYTE newDEK,
                                 DWORD keyLength, BYTE keySetVersion, BYTE keyAccessCondition);
 
OPGP_API
OPGP_ERROR_STATUS OP201_get_status(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo, BYTE cardElement, OP201_APPLICATION_DATA *applData, PDWORD applDataLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_set_status(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo, BYTE statusType, PBYTE AID, DWORD AIDLength, BYTE lifeCycleState);
 
 
OPGP_API
OPGP_ERROR_STATUS OP201_mutual_authentication(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, PBYTE baseKey, PBYTE encKey, PBYTE macKey,
                                                                 PBYTE kekKey, BYTE keySetVersion,
                                                   BYTE keyIndex, BYTE securityLevel, BYTE derivationMethod,
                                                   OP201_SECURITY_INFO *secInfo);
 
OPGP_API
OPGP_ERROR_STATUS OP201_get_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                        BYTE identifier[2], PBYTE recvBuffer, PDWORD recvBufferLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_put_data(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                        BYTE identifier[2], PBYTE dataObject, DWORD dataObjectLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_pin_change(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                BYTE tryLimit, PBYTE newPIN, DWORD newPINLength, BYTE KEK[16]);
 
OPGP_API
OPGP_ERROR_STATUS OP201_put_3desKey(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                  BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, BYTE _3desKey[16]);
 
OPGP_API
OPGP_ERROR_STATUS OP201_put_rsa_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                 BYTE keySetVersion, BYTE keyIndex, BYTE newKeySetVersion, OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS OP201_put_secure_channel_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                                         BYTE keySetVersion, BYTE newKeySetVersion,
                                                         BYTE new_encKey[16], BYTE new_macKey[16], BYTE new_KEK[16]);
 
OPGP_API
OPGP_ERROR_STATUS OP201_delete_key(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                BYTE keySetVersion, BYTE keyIndex);
 
OPGP_API
OPGP_ERROR_STATUS OP201_get_key_information_templates(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                                                   BYTE keyInformationTemplate,
                                                                   OP201_KEY_INFORMATION *keyInformation, PDWORD keyInformationLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_delete_application(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                   OPGP_AID *AIDs, DWORD AIDsLength,
                                   OP201_RECEIPT_DATA *receiptData, PDWORD receiptDataLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_install_for_load(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                          PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE securityDomainAID,
                                          DWORD securityDomainAIDLength, PBYTE loadFileDataBlockHash,
                                          DWORD loadFileDataBlockHashLength, PBYTE loadToken, DWORD loadTokenLength,
                                          DWORD nonVolatileCodeSpaceLimit, DWORD volatileDataSpaceLimit,
                                          DWORD nonVolatileDataSpaceLimit);
 
OPGP_API
OPGP_ERROR_STATUS OP201_get_load_token_signature_data(PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                                   PBYTE securityDomainAID, DWORD securityDomainAIDLength,
                                                                   PBYTE loadFileDataBlockHash, DWORD loadFileDataBlockHashLength,
                                                                   DWORD nonVolatileCodeSpaceLimit,
                                                                   DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                                   PBYTE loadTokenSignatureData, PDWORD loadTokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_get_install_token_signature_data(BYTE P1, PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                                          PBYTE AIDWithinLoadFileAID, DWORD AIDWithinLoadFileAIDLength,
                                                                          PBYTE applicationInstanceAID, DWORD applicationInstanceAIDLength,
                                                                          DWORD applicationPrivileges, DWORD volatileDataSpaceLimit,
                                                                          DWORD nonVolatileDataSpaceLimit,
                                                                          PBYTE applicationInstallParameters, DWORD applicationInstallParametersLength,
                                                                          PBYTE sdParameters, DWORD sdParametersLength,
                                                                          PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                                          PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                                          PBYTE installTokenSignatureData, PDWORD installTokenSignatureDataLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_calculate_load_token(PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE securityDomainAID,
                                                  DWORD securityDomainAIDLength, PBYTE loadFileDAP, DWORD loadFileDAPLength,
                                                  DWORD nonVolatileCodeSpaceLimit, DWORD volatileDataSpaceLimit,
                                                  DWORD nonVolatileDataSpaceLimit, PBYTE loadToken, PDWORD loadTokenLength,
                                                  OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS OP201_calculate_install_token(BYTE P1, PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE AIDWithinLoadFileAID,
                                                         DWORD AIDWithinLoadFileAIDLength, PBYTE applicationInstanceAID,
                                                         DWORD applicationInstanceAIDLength, DWORD applicationPrivileges,
                                                         DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                         PBYTE applicationInstallParameters, DWORD applicationInstallParametersLength,
                                                         PBYTE sdParameters, DWORD sdParametersLength,
                                                         PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                         PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                         PBYTE installToken, PDWORD installTokenLength,
                                                         OPGP_STRING PEMKeyFileName, char *passPhrase);
 
OPGP_API
OPGP_ERROR_STATUS OP201_calculate_load_file_DAP(OP201_DAP_BLOCK *dapBlock, DWORD dapBlockLength,
                                                         OPGP_STRING executableLoadFileName, BYTE hash[20]);
 
OPGP_API
OPGP_ERROR_STATUS OP201_load(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                 OP201_DAP_BLOCK *dapBlock, DWORD dapBlockLength, OPGP_STRING executableLoadFileName,
                                 OP201_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable, OPGP_PROGRESS_CALLBACK *callback);
 
OPGP_API
OPGP_ERROR_STATUS OP201_load_from_buffer(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                 OP201_DAP_BLOCK *dapBlock, DWORD dapBlockLength,
                                 PBYTE loadFilebuf, DWORD loadFileBufSize,
                                 OP201_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable, OPGP_PROGRESS_CALLBACK *callback);
 
OPGP_API
OPGP_ERROR_STATUS OP201_install_for_install(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                                 PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE AIDWithinLoadFileAID,
                                                 DWORD AIDWithinLoadFileAIDLength, PBYTE applicationInstanceAID, DWORD applicationInstanceAIDLength,
                                                 DWORD applicationPrivileges, DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                 PBYTE applicationInstallParameters, DWORD applicationInstallParametersLength,
                                                 PBYTE sdParameters, DWORD sdParametersLength,
                                                 PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                 PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                 PBYTE installToken, DWORD installTokenLength,
                                                 OP201_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS OP201_install_for_make_selectable(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                                                 PBYTE applicationInstanceAID, DWORD applicationInstanceAIDLength,
                                                                 DWORD applicationPrivileges, PBYTE installToken, DWORD installTokenLength,
                                                                 OP201_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS OP201_install_for_install_and_make_selectable(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,                                            PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength, PBYTE AIDWithinLoadFileAID,
                                                 DWORD AIDWithinLoadFileAIDLength, PBYTE applicationInstanceAID,
                                                 DWORD applicationInstanceAIDLength, DWORD applicationPrivileges,
                                                 DWORD volatileDataSpaceLimit, DWORD nonVolatileDataSpaceLimit,
                                                 PBYTE applicationInstallParameters, DWORD applicationInstallParametersLength,
                                                 PBYTE sdParameters, DWORD sdParametersLength,
                                                 PBYTE uiccSystemSpecParams, DWORD uiccSystemSpecParamsLength,
                                                 PBYTE simSpecParams, DWORD simSpecParamsLength,
                                                 PBYTE installToken, DWORD installTokenLength,
                                                 OP201_RECEIPT_DATA *receiptData, PDWORD receiptDataAvailable);
 
OPGP_API
OPGP_ERROR_STATUS OP201_put_delegated_management_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                                                   BYTE keySetVersion,
                                                                   BYTE newKeySetVersion,
                                                                   OPGP_STRING PEMKeyFileName, char *passPhrase,
                                                                   BYTE receiptGenerationKey[16]);
 
OPGP_API
OPGP_ERROR_STATUS OP201_send_APDU(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo,
                                         PBYTE capdu, DWORD capduLength, PBYTE rapdu,
                           PDWORD rapduLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_calculate_3des_DAP(PBYTE securityDomainAID, DWORD securityDomainAIDLength, OPGP_STRING executableLoadFileName,
                                                BYTE DAP_verification_key[16], OP201_DAP_BLOCK *dapBlock);
 
OPGP_API
OPGP_ERROR_STATUS OP201_calculate_rsa_DAP(PBYTE securityDomainAID, DWORD securityDomainAIDLength, OPGP_STRING executableLoadFileName,
                                           OPGP_STRING PEMKeyFileName, char *passPhrase, OP201_DAP_BLOCK *dapBlock);
 
OPGP_API
OPGP_ERROR_STATUS OP201_validate_delete_receipt(DWORD confirmationCounter, BYTE cardUniqueData[10],
                                                   BYTE receiptGenerationKey[16], OP201_RECEIPT_DATA receiptData,
                                                   PBYTE AID, DWORD AIDLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_validate_install_receipt(DWORD confirmationCounter, BYTE cardUniqueData[10],
                                                   BYTE receiptGenerationKey[16], OP201_RECEIPT_DATA receiptData,
                                                   PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                   PBYTE applicationInstanceAID, DWORD applicationInstanceAIDLength);
 
OPGP_API
OPGP_ERROR_STATUS OP201_validate_load_receipt(DWORD confirmationCounter, BYTE cardUniqueData[10],
                                                   BYTE receiptGenerationKey[16], OP201_RECEIPT_DATA receiptData,
                                                   PBYTE executableLoadFileAID, DWORD executableLoadFileAIDLength,
                                                   PBYTE securityDomainAID, DWORD securityDomainAIDLength);
 
 
OPGP_API
OPGP_ERROR_STATUS GP211_begin_R_MAC(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, BYTE securityLevel, PBYTE data, DWORD dataLength);
 
OPGP_API
OPGP_ERROR_STATUS GP211_end_R_MAC(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, BYTE secureChannelProtocol);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_read_executable_load_file_parameters(OPGP_STRING loadFileName, OPGP_LOAD_FILE_PARAMETERS *loadFileParams);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_cap_to_ijc(OPGP_CSTRING capFileName, OPGP_STRING ijcFileName);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_extract_cap_file(OPGP_CSTRING fileName, PBYTE loadFileBuf, PDWORD loadFileBufSize);
 
OPGP_API
OPGP_ERROR_STATUS OPGP_read_executable_load_file_parameters_from_buffer(PBYTE loadFileBuf, DWORD loadFileBufSize, OPGP_LOAD_FILE_PARAMETERS *loadFileParams);
 
OPGP_API
OPGP_ERROR_STATUS GP211_EMV_CPS11_derive_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, PBYTE masterKey,
                                                        PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS GP211_VISA2_derive_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, PBYTE AID, DWORD AIDLength, PBYTE masterKey,
                                                                 PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS GP211_VISA1_derive_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, GP211_SECURITY_INFO *secInfo, PBYTE masterKey,
                                                                 PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS OP201_EMV_CPS11_derive_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo, PBYTE masterKey,
                                                        PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS OP201_VISA2_derive_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo, PBYTE AID, DWORD AIDLength, PBYTE masterKey,
                                                                 PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS OP201_VISA1_derive_keys(OPGP_CARD_CONTEXT cardContext, OPGP_CARD_INFO cardInfo, OP201_SECURITY_INFO *secInfo, PBYTE masterKey,
                                                                 PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS VISA2_derive_keys(BYTE baseKeyDiversificationData[10], PBYTE masterKey,
                                                        PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS VISA1_derive_keys(BYTE cardSerialNumber[8], PBYTE masterKey,
                                                        PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
OPGP_API
OPGP_ERROR_STATUS EMV_CPS11_derive_keys(BYTE baseKeyDiversificationData[10], PBYTE masterKey,
                                                        PBYTE S_ENC, PBYTE S_MAC, PBYTE DEK);
 
#ifdef __cplusplus
}
#endif
#endif