The APDU commands of using yubioath-android combined with OATH-Applet

[JavaCardOS]

In the process of using yubioath-android application, the following APDU commands will be used:
1. Add Time based(TOTP) account credentials, and refresh the One-Time Passcode:

Code: Select all

//select applet
00A4040008A000000527210101 
//handlePut (StoreCode) and the username and password is john and qwer Tag=0x71(john) and Tag = 0x73 is KEY_TAG qwer.
000100000C71046A6F686E730421068589; 
//handleCalcAll: P2=1,Tag=74... Calculate message digest, the APDU response is the One-Time Passcode with time based.
00A400010A74080000000002E3BCC5;

2. Add Event based(HOTP) account credentials, and refresh the One-Time Passcode:

Code: Select all

//select applet 
 00A4040008A000000527210101;
 //handlePut (StoreCode): the username and password is marry and qazwsx
 000100000E71056D6172727973051106803369;
 //calculate, Calculate message digest, the APDU response is the One-Time Passcode with event based.
 00A200010971056D617272797400; 

3.Change device password:

Code: Select all

//select applet  
00A4040008A000000527210101;
//handleChangeCode(setLockCode) the device password is qazwsx
000300003373112166C55642C4194FBD065432E77FDE0B017408791A30562CDDC1DF75140B8008644AD88991063CA7DADB3835E07E486C30;

After setting the device password, you need to verify device password every time first, and then perform other operations.

4. Refresh TOTP One-Time Passcode :

Code: Select all

//select applet
00A4040008A000000527210101;
//handleValidate(doUnlock)
00A3000020751447F28EA873125711F6ED94A790845833B73B75FA74087CB26561E60C808C;
//handleCalcAll
00A400010A74080000000002E3BDB7;

5. Reset the device password:

Code: Select all

//select applet
00A4040008A000000527210101;
//handleValidate(doUnlock)
00A3000020751418DE81A54F7D18EDD6E9228E946EE5724CC9D96F74081D947956B867CAB1;
//handleChangeCode(setLockCode)
000300003373112166C55642C4194FBD065432E77FDE0B017408662D530C2ADE703375140E0055947B08A9C659341B0E83BD05B0BCD53708;

[sherry]

I want to know a complete HOTP validation process?
the protocol INS that:
|========================
|PUT
|DELETE
|SET CODE
|RESET
|LIST
|CALCULATE
|VALIDATE
|CALCULATE ALL
|SEND REMAINING
|========================
I understand the PUT,DELETE,RESET and LIST instruction .
I do not understand the VALIDATE ,SET CODE and CALCULATE(CALCULATE ALL) INS what that do?

[nobody2015]

I want to know too.

[Ellisun]

You can see the specifications in attachments about OATH-Applet.