piv_apdu.h

Cstruct piv_apdu_backend

Platform operations for the persistent PIV identity. PIN callbacks return 0 on success, 1 on a wrong PIN, -2 when the PIN is blocked or has not been provisioned, and -1 on an internal failure. The retry count is returned for ISO 7816 status 63Cx. get_certificate selects slot 9A or 9D using key_ref. sign_hash receives the off-card SHA-256 digest required by PIV GENERAL AUTHENTICATE. derive_shared performs the P-256 ECDH primitive for slot 9D.

Cstruct piv_apdu

PIV APDU command handler state: tracks APDU selection, PIN verification status, and buffered response for chunked transmission.

##define PIV_APDU_MAX_RESPONSE 1024u

##define PIV_PIN_BYTES 8u

##define PIV_P256_HASH_BYTES 32u

##define PIV_P256_POINT_BYTES 65u

##define PIV_P256_SHARED_SECRET_BYTES 32u

##define PIV_P256_RAW_SIGNATURE_BYTES 64u

##define PIV_KEY_REF_AUTH 0x9au

##define PIV_KEY_REF_KEY_MANAGEMENT 0x9du

Fvoid piv_apdu_init(struct piv_apdu *piv, const struct piv_apdu_backend *backend, void *backend_ctx, bool pin_required)

Fvoid piv_apdu_reset(struct piv_apdu *piv)

Fint piv_apdu_transmit(struct piv_apdu *piv, const uint8_t *command, size_t command_len, uint8_t *response, size_t response_cap, size_t *response_len)