Home

Minidriver for EstEID ID-cards (all versions)

Background:

• MS specification: https://msdn.microsoft.com/en-us/library/windows/hardware/dn631754%28v=vs.85%29.aspx
• Implemented: versions 5, 6, 7.

For ATRFilter see https://github.com/open-eid/minidriver/wiki/Atrfilter

Supported platforms:

• Windows 7 (x86, x64), Windows 8/8.1 (x86, x64)
• 3.7.0.787
  • Windows 7 (x86, x64), Windows 8/8.1 (x86, x64)
• 3.8.0.1119
  • Windows 7 (x86, x64), Windows 8/8.1 (x86, x64)
  • added support for v3.5 cards
  • added support for pinpad readers
• 3.10.0.1160
  • Windows 7 (x86, x64), Windows 8/8.1 (x86, x64)
• Exceptions

Supported features (references to MD specification have been added where necessary):

• pinpad
• hash algorithms
  • MD5, SHA1, SHA_224, SHA_256, SHA_384, SHA_512
• UX
• Logging / Debugging and other useful stuff in minidriver https://github.com/open-eid/smartcardpp/wiki
• Logging in RDP session written in Server to %TEMP% smartcardpp.log
• Set currently used spec version With this you can control which minidriver spec is in use. Supported 5, 6, 7
• Turn on test mode This will disable PIN change and PIN unblock functions. Set testmode value in key HKEY_LOCAL_MACHINE\Software\SK\EstEIDMinidriver to 1.
• Exceptions

Implemented API

DllMain
CardAcquireContext
CardDeleteContext
CardGetContainerProperty
CardSetContainerProperty
CardGetProperty
CardSetProperty
CardQueryCapabilities
CardCreateContainer
CardGetContainerInfo
CardAuthenticatePin
CardAuthenticateEx
CardEnumFiles
CardGetFileInfo
CardReadFile
CardWriteFile
CardQueryFreeSpace
CardQueryKeySizes
CardRSADecrypt
CardSignData

Not Implimented API

CardDeleteContainer
CardUnblockPin
CardChangeAuthenticator
CardCreateDirectory
CardDeleteDirectory
CardCreateFile
CardDeleteFile
CardConstructDHAgreement
CardDeriveKey
CardDeriveKey
CspGetDHAgreement
CardGetChallenge
CardAuthenticateChallenge
CardGetChallengeEx
CardChangeAuthenticatorEx
CardDeauthenticate
CardDeauthenticateEx

Usage:

• CNG
  • https://msdn.microsoft.com/en-us/library/windows/desktop/aa376210(v=vs.85).aspx
  • Vista/Server 2008 and onwards
• CryptoAPI
  • https://msdn.microsoft.com/en-us/library/windows/desktop/aa380256%28v=vs.85%29.aspx ?

Diagnostics

• To verify installation of minidriver open Command Prompt and run C:\Windows\System32\certutil -scinfo command.

Testing unsigned driver

Run in CMD with administrator rights:

bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS bcdedit.exe -set TESTSIGNING ON

Restart windows