Enhance TC_SECPKI_EA_BFK_AUTH_06_BV (747ad237) · Commits · ITS - Intelligent Transport Systems / ITS Test Suite

ccsrc/Protocols/Security/module.mk

+1 −0

Original line number	Diff line number	Diff line
		@@ -30,6 +30,7 @@ endif

		ifeq (AtsMBR, $(ATS))
		sources += http_etsi_ieee1609dot2_codec.cc \
		http_etsi_ieee1609dot2dot1_codec.cc \

		endif

etc/AtsCAM/AtsCAM.cfg

+17 −25

Original line number	Diff line number	Diff line
		@@ -13,11 +13,12 @@ LibItsCam_Pics.PICS_IS_IUT_SECURED := true
		[LOGGING]
		# In this section you can specify the name of the log file and the classes of events
		# you want to log into the file or display on console (standard error).

		LogFile := "../logs/AtsCAM/%e.%h-%r.%s"
		FileMask := LOG_ALL \| USER \| DEBUG \| MATCHING
		ConsoleMask := LOG_ALL \| USER \| DEBUG \| MATCHING
		#FileMask := ERROR \| WARNING \| USER \| PORTEVENT \| MATCHING \| EXECUTOR_RUNTIME \| TIMEROP \| VERDICTOP
		#ConsoleMask := ERROR \| WARNING \| USER \| PORTEVENT \| MATCHING \| EXECUTOR_RUNTIME \| TIMEROP \| VERDICTOP
		#FileMask := ERROR \| WARNING \| USER \| MATCHING \| EXECUTOR_RUNTIME \| VERDICTOP
		#ConsoleMask := ERROR \| WARNING \| USER \| MATCHING \| EXECUTOR_RUNTIME \| VERDICTOP
		LogSourceInfo := Stack
		LogEntityName:= Yes
		LogEventTypes:= Yes
		@@ -39,7 +40,7 @@ LogEventTypes:= Yes
		# device_mode : Set to 1 if the layer shall encapsulate upper layer PDU
		# device_mode : Set to 1 if the layer shall encapsulate upper layer PDU
		# GN Layer
		# ll_address : GeoNetworking address of the Test System for beaconing. To be align with CAM
		# ll_address : GeoNetworking address of the Test System
		# latitude : Latitude of the Test System
		# longitude : Longitude of the Test System
		# beaconing : Set to 1 if GnLayer shall start beaconing
		@@ -52,8 +53,11 @@ LogEventTypes:= Yes
		# hash : Hash algorithm to be used when secured mode is set
		# Authorized values are SHA-256 or SHA-384
		# Default: SHA-256
		# signature : Signature algorithm to be used when secured mode is set
		# Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384
		# Default: NISTP-256
		# cypher : Cyphering algorithm to be used when secured mode is set
		# Authorized values are NISTP-256 and BP-256
		# Authorized values are NISTP-256, BP-256 and BP-384
		# Default: NISTP-256
		# Ethernet layer
		# mac_src :Source MAC address
		@@ -88,28 +92,21 @@ LogEventTypes:= Yes
		# save_mode : Set to 1 to save sent packet, 0 otherwise

		# Cygwin
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=e2b7b30429eb)/PCAP(mac_src=e2b7b30429eb,nic=CEBB111F-D749-4B40-8B4D-DBB060E90987,filter=and ether proto 0x8947)"
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=e2b7b30429eb)/PCAP(mac_src=e2b7b30429eb,nic=CEBB111F-D749-4B40-8B4D-DBB060E90987,filter=and ether proto 0x8947)"
		# Linux
		system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=8c554ac1eee0)/PCAP(mac_src=8c554ac1eee0,nic=wlp0s20f3,filter=and ether proto 0x8947)"
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=wlp2s0,filter=and ether proto 0x8947)"
		# Linux over UDP
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=8c554ac1eee0)/UDP(dst_ip=192.168.1.43,src_port=4041,dst_port=9091)"

		# PC5 + UU/Raw
		#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EB,latitude=515340240,longitude=139274330,its_aid=36,secured_mode=1,certificate=CERT_IUT_A_AT,sec_db_path=../data/certificates/certificates_iut)/LTE(mac_src=8c554ac1eee1,nic=wlp0s20f3,filter=and ether proto 0x8947,pc5_layer=QUALCOMM,uu_protocol=raw,uu_transport=udp,dst_ip=192.168.1.43,dst_port=4041,src_port=9091)"
		# PC5 + Uu/MQTT
		# Raw UDP
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/LTE(mac_src=8c554ac1eee0,nic=wlp0s20f3,filter=and ether proto 0x8947,pc5_layer=QUALCOMM,uu_protocol=mqtt,mqtt_client_id=8c554ac1eee0,mqtt_topics=rsu,uu_transport=udp,debug=1,server=192.168.1.39,port=1883)"
		# MQTT over TCP
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/LTE(mac_src=8c554ac1eee0,nic=wlp0s20f3,filter=and ether proto 0x8947,pc5_layer=QUALCOMM,uu_protocol=mqtt,mqtt_client_id=8c554ac1eee0,mqtt_topics=rsu,uu_transport=tcp,debug=1,server=192.168.1.39,port=1883)"
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/UDP(dst_ip=192.168.146.26,src_port=4041,dst_port=9091)"
		system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=tun0,filter=and ether proto 0x8947)"

		# CAM UpperTester port based on UDP
		system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.1.43,dst_port=12345,src_port=12346)"
		#system.utPort.params := "UT_CAM/UDP(dst_ip=127.0.0.1,dst_port=12345,src_port=12346)"
		#system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.146.26)"
		#system.utPort.params := "UT_CAM/UDP(dst_ip=172.16.35.1)"
		system.utPort.params := "UT_CAM/UDP(dst_ip=10.8.0.6)"

		[EXECUTE]
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01
		ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02
		ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_03
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_04
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_05
		@@ -155,13 +152,8 @@ ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02
		#ItsCam_TestCases.TC_CAM_MSD_INA_BV_06
		#ItsCam_TestCases.TC_CAM_MSD_INA_BV_07
		#ItsCam_TestCases.TC_CAM_MSD_INA_BV_08
		#ItsCam_TestCases.TC_CAM_MSP_BV_01
		#ItsCam_TestCases.TC_CAM_MSP_SSP_BV_01
		#ItsCam_TestCases.TC_CAM_MSP_SSP_BV_02
		#ItsCam_TestCases.TC_CAM_MSP_SSP_BV_03
		#ItsCam_TestCases.TC_CAM_MSD_SSP_BO_01
		#ItsCam_TestCases.TC_CAM_MSD_SSP_BO_02
		#ItsCam_TestCases.TC_CAM_MSD_SSP_BO_03
		#ItsCam_TestCases.TC_CAM_MSP_BV_01

		[MAIN_CONTROLLER]
		# The options herein control the behavior of MC.

etc/AtsCAM/AtsCAM_Yogoko.cf_

+4 −4

Original line number	Diff line number	Diff line
		@@ -97,18 +97,18 @@ LogEventTypes:= Yes
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=wlp2s0,filter=and ether proto 0x8947)"
		# Linux over UDP
		#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/UDP(dst_ip=192.168.146.26,src_port=4041,dst_port=9091)"
		system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=tap0,filter=and ether proto 0x8947)"
		system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=tun0,filter=and ether proto 0x8947)"

		# CAM UpperTester port based on UDP
		#system.utPort.params := "UT_CAM/UDP(dst_ip=127.0.0.1,dst_port=12345,src_port=12346)"
		#system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.146.26)"
		system.utPort.params := "UT_CAM/UDP(dst_ip=172.16.35.1)"
		system.utPort.params := "UT_CAM/UDP(dst_ip=10.8.0.6)"

		[EXECUTE]
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01
		ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_03
		ItsCam_TestCases.TC_CAM_MSD_FMT_BV_04
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_04
		#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_05
		#ItsCam_TestCases.TC_CAM_MSD_INA_BV_01_01
		#ItsCam_TestCases.TC_CAM_MSD_INA_BV_01_02

etc/AtsMBR/AtsMBR.cfg

+5 −5

Original line number	Diff line number	Diff line
		@@ -135,22 +135,22 @@ LogEventTypes:= Yes
		# Cygwin
		#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=e2b7b30429eb)/PCAP(mac_src=e2b7b30429eb,nic=CEBB111F-D749-4B40-8B4D-DBB060E90987,filter=and ether proto 0x8947)"
		# Linux
		system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=8c554ac1eee0)/PCAP(mac_src=8c554ac1eee0,nic=wlo1,filter=and ether proto 0x8947)"
		#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EB,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,its_aid=36)/ETH(mac_src=8c554ac1eee0)/PCAP(mac_src=8c554ac1eee0,nic=wlo1,filter=and ether proto 0x8947)"
		# Linux over UDP
		#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EB,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,its_aid=36)/ETH(mac_src=8c554ac1eee0)/UDP(dst_ip=192.168.1.39,src_port=4041,dst_port=9091)"

		# For all test where IUT is not MA, uncomment this port
		system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.39)"
		#system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.39)"
		system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=10.8.0.1)"
		# For TC_MRS_MA_SEC_BO_01 & TC_MRS_MA_SEC_BO_01 Use this port and comment the one above
		#system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server=192.168.1.39,port=18000)"

		system.utMbrPort.params := "UT_MBR/UDP(dst_ip=192.168.1.39,dst_port=12345,src_port=12346)"
		#system.utMbrPort.params := "UT_MBR/UDP(dst_ip=192.168.1.39,dst_port=12345,src_port=12346)"
		system.utMbrPort.params := "UT_MBR/UDP(dst_ip=10.8.0.2,dst_port=12345,src_port=12346)"

		[EXECUTE]

		# Check that the IUT generates an encrypted MBR message
		#ItsMbr_TestCases.TC_MRS_ITSS_SEC_BV_01

		# Check that the IUT discards an encrypted MBR message when recipientId does not contain MA certificate
		# Set local_port to 18000 for AtsRSUsSimulator
		@@ -181,7 +181,7 @@ system.utMbrPort.params := "UT_MBR/UDP(dst_ip=192.168.1.39,dst_port=12345,src_po
		#ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_BV_01

		# Check that the IUT generates an invalid speed value observation on a CAM in the MR message when requested (Class 1) - obs-Speed-ValueTooLarge-VehicleType (e.g. A cycle with a speed of 100km/h)
		ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_CLASS1_CAM_BV_01
		#ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_CLASS1_CAM_BV_01

		# Check that the IUT generates an invalid speed value in reverse driving observation on a CAM in the MR message when requested (Class 1) - obs-Speed-ValueTooLarge-DriveDirectionReverse
		#ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_CLASS1_CAM_BV_02

etc/AtsPki/AtsPki_Simu.cfg_

+31 −17

Original line number	Diff line number	Diff line
		@@ -11,13 +11,20 @@ LibItsGeoNetworking_Pics.PICS_GN_LOCAL_GN_ADDR := {

		LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_btpB

		LibItsBtp_Pixits.PX_DESTINATION_PORT := 2001
		LibItsBtp_Pixits.PX_DESTINATION_PORT_INFO := 2001

		# Enable Security support
		LibItsGeoNetworking_Pics.PICS_GN_SECURITY := true
		LibItsGeoNetworking_Pixits.PX_NEIGHBOUR_DISCOVERY_DELAY := 2.0

		# Root path to access certificate stored in files, identified by certficate ID
		LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "../data/certificates"

		# Configuration sub-directory to access certificate stored in files
		LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "certificates"

		#LibItsSecurity_Pics.PICS_SEC_FIXED_KEYS := true # Seed
		LibItsSecurity_Pixits.PX_BFK_TEST_VECTORS := false

		# Use this certificate if the RSU simulator act as IUT
		@@ -26,7 +33,7 @@ LibItsCommon_Pixits.PX_CERT_FOR_TS := "CERT_IUT_A_AT"
		LibHttp_Pics.PICS_HEADER_CONTENT_TYPE := "application/x-its-request"
		LibHttp_Pics.PICS_HEADER_CTL_CONTENT_TYPE := "application/x-its-crl"

		LibHttp_Pics.PICS_HEADER_HOST := "192.168.1.43"
		LibHttp_Pics.PICS_HEADER_HOST := "192.168.1.21"

		LibItsPki_Pics.PICS_HTTP_POST_URI_EC := "/ea/enrolment"
		LibItsPki_Pics.PICS_HTTP_POST_URI_AT := "/aa/authorization"
		@@ -37,13 +44,6 @@ LibItsPki_Pics.PICS_IUT_ITS_S_ROLE := true
		LibItsPki_Pics.PICS_SECPKI_ENROLMENT := true
		LibItsPki_Pics.PICS_SECPKI_ENROLLMENT_X509 := false

		LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID := "CERT_TS_A_EA"
		LibItsPki_Pics.PICS_TS_AA_CERTIFICATE_ID := "CERT_TS_A_AA"

		LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D5465737453797374656D2D3031'O # Nist-P256
		#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D5465737453797374656D2D3032'O # Brainpool-P256 r1
		#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D5465737453797374656D2D3033'O # Brainpool-P384 r1

		# Technical keys
		# NOTE: In case of OBU is the IUT, PICS_ITS_S_SIGN_xxx_PUBLIC_KEY is shared with the IUT (process of registration)
		# Private key
		@@ -52,15 +52,35 @@ LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D546573745379
		#048038F5490CD5A58FF5465D3B577EE830047336AC5DAC07036B798AAECAE7273FD91C4F60995494EA949E64EE0E3D768DBDEB8AFC345627211E3FC4DD8FD39EE5
		LibItsPki_Pics.PICS_ITS_S_SIGN_NITSP256_PRIVATE_KEY := 'FE95786F01D7E1666CCDFAB7BAEE9BF9B30BBEA15A838A58994E65E684A8BB34'O;
		LibItsPki_Pics.PICS_ITS_S_SIGN_NISTP256_PUBLIC_KEY := '038038f5490cd5a58ff5465d3b577ee830047336ac5dac07036b798aaecae7273f'O;
		#LibItsPki_Pics.PICS_ITS_S_ENC_NITSP256_PRIVATE_KEY := 'EDEBEADCAA9514CD4B30256126FB7DF958B911C6EB58CCF702983C3DCD3DECBD'O;
		#LibItsPki_Pics.PICS_ITS_S_ENC_NISTP256_PUBLIC_KEY := '023A4ADDCDD5EE66DAB2116B0C3AB47CCEDAE92CD9ACE98A84B10EB63A9DCA798C'O;
		#LibItsPki_Pics.PICS_ITS_S_ENC_BRAINPOOLP256r1_PRIVATE_KEY := '9F155D40B6C920BA45D8027093C8ADADAF3AA6F9F71F0CC0F8279FF0146A8A48'O;
		#LibItsPki_Pics.PICS_ITS_S_ENC_BRAINPOOLP256r1_PUBLIC_KEY := '038602F468BD334EA4D2BA416295E204D58BD1F42C85FB9BE57237C74544F6A69A'O;
		#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP256r1_PRIVATE_KEY := '6D585B716D06F75EC2B8A8ADEBFCE6ED35B0640C2AFBFF25FE48FC81A6732D4F'O;
		#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP256r1_PUBLIC_KEY := '02A92BA3B770B040B8D958D5BD2CC9B537212D6963F50EA3E4784FEFA5D0454C12'O;
		#LibItsPki_Pics.PICS_ITS_S_ENC_BRAINPOOLP384r1_PRIVATE_KEY := '6B4B4392511B252C904801466F5DA0A7F28E038E6656800CBB0CDCB3D32F862CA4D59CBDC1A19E98E9191582AF1DB3D7'O;
		#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP384r1_PRIVATE_KEY := '3CD977195A579787C84D5900F4CB6341E0C3D2750B140C5380E6F03CE3FBA0022F7541DEABDCED4790D313ED8F56ACA8'O;
		#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP384r1_PUBLIC_KEY := '0243FF5C96984C2C3F5FD5C5F6551C90F5FAEE1E5E8301763E4AF1E9D627F3474E554B82EE98EC4B49808DFF61B35F8313'O;

		LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D5465737453797374656D2D3031'O # Nist-P256
		#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D5465737453797374656D2D3032'O # Brainpool-P256 r1
		#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D5465737453797374656D2D3033'O # Brainpool-P384 r1

		LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID := "CERT_TS_A_EA"
		LibItsPki_Pics.PICS_TS_AA_CERTIFICATE_ID := "CERT_TS_A_AA"

		# Set to true if the IUT support CertificateId shall be set to the choice name, false if it shall be omitted
		#LibItsPki_Pics.PICS_EC_SUBJECT_ATTRIBUT_ID := false # requestedSubjectAttributes.id is omitted
		# Set to true if the IUT support geographical region
		#LibItsPki_Pics.PICS_EC_SUBJECT_ATTRIBUT_REGION := false # requestedSubjectAttributes.region is omitted

		ItsPki_Pixits.PX_TRIGGER_EC_BEFORE_AT := false;

		ItsPki_Pixits.PX_CERT_EXPIRATION_DELAY := 15.0

		#LibItsPki_Pics.PICS_PKI_AUTH_POP := false # Do not use Signed for PoP in Authorization requet
		# Required for SECPKI_AA_AUTH_RCV_02_BV
		#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := false # Check in logs the pattern '==> EC ' to find the required information for re-enrolment
		#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := true # Check in logs the pattern '==> EC ' to find the required information for re-enrolment

		#LibItsPki_Pixits.PX_INCLUDE_ENCRYPTION_KEYS := false # No encryption key in Authorization request

		@@ -75,12 +95,6 @@ LibItsPki_Pics.PICS_ITS_S_SIGN_NISTP256_PUBLIC_KEY := '038038f5490cd5a58ff5465d3
		LibItsSecurity_Pics.PICS_SEC_CIRCULAR_REGION := false
		LibItsSecurity_Pics.PICS_SEC_RECTANGULAR_REGION := true

		# BFK
		LibItsSecurity_Pics.PICS_SEC_BFK_AUTH := true
		LibItsSecurity_Pics.PICS_SECPKI_ORIGINAL_BFK_KEY := true
		LibItsSecurity_Pics.PICS_SECPKI_UNIFIED_BFK_KEY := false
		LibItsSecurity_Pics.PICS_SECPKI_COMPACT_UNIFIED_BFK_KEY := false

		[LOGGING]
		# In this section you can specify the name of the log file and the classes of events
		# you want to log into the file or display on console (standard error).