EndOfSTF594

module LibItsSecurity_EncdecDeclarations {

    // LibIts

    //import from Ieee1609Dot2BaseTypes language "ASN.1:1997" all;

    import from Ieee1609Dot2 language "ASN.1:1997" all;

    //import from EtsiTs103097Module language "ASN.1:1997" all;

    // LibItsSecurity

    import from LibItsSecurity_TypesAndValues all;

    /**

     * @desc Encoding function for EtsiTs103097Certificate certificate

     * @param p The certificate to encode

     * @return The encode message in OER format

     */

    external function fx_enc_CertificateBase(in Ieee1609Dot2.CertificateBase p) return bitstring

      with {extension "prototype(convert) encode(PER)"}

    external function fx_dec_CertificateBase(inout bitstring b, out Ieee1609Dot2.CertificateBase p) return integer

        with {extension "prototype(sliding) decode(PER)"}

    /**

     * @desc Encoding function for Ieee1609Dot2.ToBeSignedCertificate

     * @param p The ToBeSign part of the certificate

     * @return The encode message in OER format

     */

    external function fx_enc_ToBeSignedCertificate(in Ieee1609Dot2.ToBeSignedCertificate p) return bitstring

        with {extension "prototype(convert) encode(PER)"}

    /**

     * @desc Encoding function for Ieee1609Dot2.Ieee1609Dot2Data

     * @param p The Ieee1609Dot2Data part of the certificate

     * @return The encode message in OER format

     */

    external function fx_enc_Ieee1609Dot2Data(in Ieee1609Dot2.Ieee1609Dot2Data p) return bitstring

    with {extension "prototype(convert) encode(PER)"}

    external function fx_dec_Ieee1609Dot2Data(inout bitstring p_data, out Ieee1609Dot2.Ieee1609Dot2Data p_ieee1609Dot2Data) return integer

        with {extension "prototype(sliding) decode(PER)"}

    external function fx_enc_Ieee1609Dot2ToBeSignedData(in Ieee1609Dot2.ToBeSignedData p) return bitstring

    with {extension "prototype(convert) encode(PER)"}

    external function fx_dec_Ieee1609Dot2ToBeSignedData(inout bitstring p_data, out Ieee1609Dot2.ToBeSignedData p_toBeSignedData) return integer

        with {extension "prototype(sliding) decode(PER)"}

    external function fx_enc_SspCAM (LibItsSecurity_TypesAndValues.SspCAM p_ssp) return bitstring

        with {extension "prototype(convert) encode(LibItsSecurity)"}

    external function fx_dec_SspCAM (inout bitstring p_data, out LibItsSecurity_TypesAndValues.SspCAM p_ssp) return integer

        with {extension "prototype(sliding) decode(LibItsSecurity)"}

    external function fx_enc_SspDENM (LibItsSecurity_TypesAndValues.SspDENM p_ssp) return bitstring

        with {extension "prototype(convert) encode(LibItsSecurity)"}

    external function fx_dec_SspDENM (inout bitstring p_data, out LibItsSecurity_TypesAndValues.SspDENM p_ssp) return integer

        with {extension "prototype(sliding) decode(LibItsSecurity)"}

} // End of module LibItsSecurity_EncdecDeclarations 

/**

 *  @author   ETSI / STF481 / STF507 / STF517

 *  @version  $Url: https://oldforge.etsi.org/svn/LibIts/tags/20170222_STF527_Final/ttcn/Security/LibItsSecurity_Pics.ttcn3 $

 *            $Id: LibItsSecurity_Pics.ttcn3 1318 2017-01-26 10:20:53Z filatov $

 *  @desc     Module containing Pics for Security Protocol

 *  @copyright   ETSI Copyright Notification

 *               No part may be reproduced except as authorized by written permission.

 *               The copyright and the foregoing restriction extend to reproduction in all media.

 *               All rights reserved.

 *

 */

module LibItsSecurity_Pics {

    // LibIts

    import from Ieee1609Dot2BaseTypes language "ASN.1:1997" all;

    import from Ieee1609Dot2 language "ASN.1:1997" all;

    import from EtsiTs103097Module language "ASN.1:1997" all;

    // LibItsSecurity

    import from LibItsSecurity_TypesAndValues all;

    /**

     * Does the IUT support SHA-256 digest

     */

    modulepar boolean PICS_SEC_SHA256 := true;

    /**

     * Does the IUT support SHA-384 digest

     */

    modulepar boolean PICS_SEC_SHA384 := false;

    /**

     * Does the IUT support NIST P256 algorithm

     */

    modulepar boolean PICS_SEC_NIST_P256 := true;

    /**

     * Does the IUT support Brainpool P256r1 algorithm

     */

    modulepar boolean PICS_SEC_BRAINPOOL_P256R1 := false;

    /**

     * Does the IUT support Brainpool P384r1 algorithm

     */

    modulepar boolean PICS_SEC_BRAINPOOL_P384R1 := false;

    /**

     * Is the IUT able to distribute AT certificates

     */

    modulepar boolean PICS_SEC_P2P_AT_DISTRIBUTION := true;

    /**

     * Is the IUT able to distribute AA certificates

     */

    modulepar boolean PICS_SEC_P2P_AA_DISTRIBUTION := true;

    /**

     * Is the IUT support certificates pushing

     */

    modulepar boolean PICS_SEC_CERTIFICATE_SELECTION := true;

    /**

     * Is the IUT support circular region geographical restriction

     */

    modulepar boolean PICS_SEC_CIRCULAR_REGION := true;

    /**

     * Does the IUT support rectangular region geographical restriction

     */

    modulepar boolean PICS_SEC_RECTANGULAR_REGION := true;

    /**

     * Does the IUT support polygonal region geographical restriction

     */

    modulepar boolean PICS_SEC_POLYGONAL_REGION := true;

    /**

     * Is the IUT support identified region geographical restriction

     */

    modulepar boolean PICS_SEC_IDENTIFIED_REGION := true;

    /**

     * Does the IUT support identified region/UN geographical restriction

     */

    //TODO Remove modulepar boolean PICS_SEC_UN_STATS_REGION_DICTIONARY := true;

    /**

     * Does the IUT support identified region/ISO31661 geographical restriction

     */

    //TODO Remove modulepar boolean PICS_ISO31661_REGION_DICTIONARY := true;

    /**

     * Does the IUT support ITS-AID for Generic profile?

     */

    modulepar boolean PICS_SEC_ITS_AID_OTHER := true;

} // End of module LibItsSecurity_Pics

/**

 *  @author   ETSI / STF481 / STF507 / STF517 / STF538

 *  @version  $Url: https://oldforge.etsi.org/svn/LibIts/tags/20170222_STF527_Final/ttcn/Security/LibItsSecurity_Pixits.ttcn3 $

 *            $Id: LibItsSecurity_Pixits.ttcn3 1318 2017-01-26 10:20:53Z filatov $

 *  @desc     Module containing Pixits for Security Protocol

 *  @copyright   ETSI Copyright Notification

 *               No part may be reproduced except as authorized by written permission.

 *               The copyright and the foregoing restriction extend to reproduction in all media.

 *               All rights reserved.

 *

 */

module LibItsSecurity_Pixits {

    // LibCommon

    import from LibCommon_BasicTypesAndValues all;

    import from LibCommon_DataStrings all;

    // LibIts

    import from Ieee1609Dot2BaseTypes language "ASN.1:1997" all;

    import from Ieee1609Dot2 language "ASN.1:1997" all;

    import from EtsiTs103097Module language "ASN.1:1997" all;

    /**

     * @desc Root path to access certificate stored in files, identified by certficate ID

     */

    modulepar charstring PX_CERTIFICATE_POOL_PATH := "data/v3/certificates";

    /**

     * @desc Configuration sub-directory to access certificate stored in files

     */

    modulepar charstring PX_IUT_SEC_CONFIG_NAME := "";

    /**

     * @desc The certficate the IUT should use. Default: CERT_IUT_A_AT

     * @remark If the IUT cannot use the test certificates, set this PIXIT to CERT_NONE

     */

    modulepar charstring PX_IUT_DEFAULT_CERTIFICATE := "CERT_IUT_A_AT";

    /**

     * @desc The certficate the IUT should use. Default: CERT_TS_B_AT

     * @remark Possible values: CERT_TS_C_AT, CERT_TS_D_AT, or CERT_TS_E_AT

     */

    modulepar charstring PX_AT_CERTIFICATE := "CERT_TS_B_AT";

    /**

     * @desc ITS-AID value for other profile. Default: 38

     */

    modulepar Psid PX_OTHER_ITS_AID := 141; // Assign to GN-MGMT, Other than CA, DEN, MAP, SPAT, IVI, SRE, SSE & GN-MGMT: 38

    /**

     * @desc Invalid protocol version. Default: 3

     */

    modulepar UInt8 PX_WRONG_PROTOCOL_VERSION := 4;

    /**

     * @desc Invalid WGS longitude

     */

    modulepar SecLongitude PX_WGSLONGITUDE := 0;

    /**

     * @desc Invalid WGS latitude. Default: 1

     */

    modulepar SecLatitude PX_WGSLATITUDE := 0;

} // End of module LibItsSecurity_Pixits

/**

 *  @author   ETSI / STF481 / STF507 / STF517

 *  @version  $Url: https://oldforge.etsi.org/svn/LibIts/tags/20170222_STF527_Final/ttcn/Security/LibItsSecurity_TypesAndValues.ttcn3 $

 *            $Id: LibItsSecurity_TypesAndValues.ttcn3 1318 2017-01-26 10:20:53Z filatov $

 *  @desc     Module containing types and values for Security Protocol

 *  @see Draft ETSI TS 103 097 V1.1.14

 *  @copyright   ETSI Copyright Notification

 *               No part may be reproduced except as authorized by written permission.

 *               The copyright and the foregoing restriction extend to reproduction in all media.

 *               All rights reserved.

 */

module LibItsSecurity_TypesAndValues {

    // LibCommon

    import from LibCommon_BasicTypesAndValues all;

    import from LibCommon_DataStrings all;

    // LibItsCommon

    import from LibItsCommon_Pixits all;

    // LibIts

    import from Ieee1609Dot2BaseTypes language "ASN.1:1997" all;

    import from Ieee1609Dot2 language "ASN.1:1997" all;

    import from EtsiTs103097Module language "ASN.1:1997" all;

    /**

     * @desc Sequence of HashedId8

     */

    type record of HashedId8 HashedId8s;

        // Test Adapter certificates & private keys - Valid behavior

        const charstring cc_taCert_A  := PX_CERT_FOR_TS;   /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_A_AA := "CERT_TS_A_AA";

        const charstring cc_taCert_A_EA := "CERT_TS_A_EA";

        const charstring cc_taCert_A1   := "CERT_TS_A_A1_AT"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_A2   := "CERT_TS_A_A2_AT"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_A3   := "CERT_TS_A_A3_AT"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_B    := "CERT_TS_B_AT";   /** Default certificate, with circular region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_B1   := "CERT_TS_B_1_AT";

        const charstring cc_taCert_B_AA := "CERT_TS_B_1_AA";

        const charstring cc_taCert_A_B  := "CERT_TS_A_B_AT";

        const charstring cc_taCert_A_B3 := "CERT_TS_A_B3_AT";

        const charstring cc_taCert_C    := "CERT_TS_C_AT"; /** Certificate with a rectangular region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_C1   := "CERT_TS_C1_AT"; /** Certificate with a rectangular region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_CA1  := "CERT_TS_CA1_AT"; /** Certificate with a rectangular region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_D  := "CERT_TS_D_AT"; /** Certificate with a polygonal region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_E  := "CERT_TS_E_AT"; /** Certificate with a region identifier, to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_F  := "CERT_TS_F_AT"; /** Certificate that can be used as an unknown certificate for IUT. */

        const charstring cc_taCert_F3 := "CERT_TS_F3_AT"; /** Certificate that can be used as an unknown certificate for IUT with BrainpoolP384 curve. */

        const charstring cc_taCert_G  := "CERT_TS_G_AT"; /** to be defined */

        const charstring cc_taCert_EC := "CERT_TS_A_EC"; /** Certificate with a subject type indicating 'enrolment_credentials', to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_AA := "CERT_TS_A_AA"; /** Certificate with a subject type indicating 'authorisation_authority', to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_EA := "CERT_TS_A_EA"; /** Certificate with a subject type indicating 'enrolment_authority', to be used when secured messages are sent from TA to IUT */

        const charstring cc_taCert_CA := "CERT_TS_A_CA"; /** Certificate with a subject type indicating 'root_ca', to be used when secured messages are sent from TA to IUT */

        // Test Adapter certificates & private keys - Inoportune behavior

        const charstring cc_taCert_B_BO  := "CERT_TS_B_BO_AT"; /** Certificate with a circular region, the IUT position is outside of the region */

        const charstring cc_taCert_C_BO  := "CERT_TS_C_BO_AT"; /** Certificate with a rectangular region, the IUT position is outside of the region */

        const charstring cc_taCert_D_BO  := "CERT_TS_D_BO_AT"; /** Certificate with a polygonal region, the IUT position is outside of the region */

        const charstring cc_taCert_E_BO  := "CERT_TS_E_BO_AT"; /** Certificate with a region identifier, the IUT position is outside of the region */

        const charstring cc_taCert0101_BO := "CERT_TS_01_01_BO_AT"; /** Check that IUT discards the AT certificate with version 3 */

        const charstring cc_taCert0102_BO := "CERT_TS_01_02_BO_AT"; /** Check that IUT discards the AT certificate with version 1 */

        const charstring cc_taCert0103_BO := "CERT_TS_01_03_BO_AT"; /** Check that IUT discards the AA certificate with version 3 */

        const charstring cc_taCert0104_BO := "CERT_TS_01_04_BO_AT"; /** Check that IUT discards the AA certificate with version 1 */

        const charstring cc_taCert0201_BO := "CERT_TS_02_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the authorization ticket certificate contains the subject type 'enrolment_credential' */

        const charstring cc_taCert0202_BO := "CERT_TS_02_02_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the authorization authority certificate contains the subject type 'enrolment_credential' */

        const charstring cc_taCert0203_BO := "CERT_TS_02_03_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the authorization ticket certificate contains the subject type 'enrolment_authority' */

        const charstring cc_taCert0204_BO := "CERT_TS_02_04_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the authorization authority certificate contains the subject type 'enrolment_authority' */

        const charstring cc_taCert0301_BO := "CERT_TS_03_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the authorization ticket certificate contains the subject type 'authorization_ticket' */

        const charstring cc_taCert0302_BO := "CERT_TS_03_02_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the authorization authority certificate contains the subject type 'authorization_ticket' */

        const charstring cc_taCert0601_BO := "CERT_TS_06_01_BO_AT"; /** Check that IUT discards a SecuredMessage containing generation_time before the message signing certificate validity period */

        const charstring cc_taCert0602_BO := "CERT_TS_06_02_BO_AT"; /** Check that IUT discards a SecuredMessage containing generation_time after the message signing certificate validity period */

        const charstring cc_taCert0401_BO := "CERT_TS_04_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the issuer certificate of the AA certificate contains the subject type 'authorization_authority' */

        const charstring cc_taCertMsg1301_BO := "CERT_TS_MSG_13_01_BO_AT"; /** Check that IUT discards secured CAM signed with the not yet valid certificate */

        const charstring cc_taCertMsg1302_BO := "CERT_TS_MSG_13_02_BO_AT"; /** Check that IUT discards secured CAM signed with the expired certificate */

        const charstring cc_taCertMsg1303_BO := "CERT_TS_MSG_13_03_BO_AT"; /** Check that IUT discards secured CAM when IUT location is outside the circular validity restriction of the signing certificatee */

        const charstring cc_taCertMsg1304_BO := "CERT_TS_MSG_13_04_BO_AT"; /** Check that IUT discards secured CAM when IUT location is outside the rectangular validity restriction of the signing certificate */

        const charstring cc_taCertMsg1305_BO := "CERT_TS_MSG_13_05_BO_AT"; /** Check that IUT discards secured CAM when IUT location is outside the polygonal validity restriction of the signing certificate */

        const charstring cc_taCertMsg1306_BO := "CERT_TS_MSG_13_06_BO_AT"; /** Check that IUT discards secured CAM when IUT location is outside the identified validity restriction of the signing certificate */

        const charstring cc_taCert0601_BV := "CERT_TS_06_01_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the same circular region validity restriction as its issuing certificate */

        const charstring cc_taCert0602_BV := "CERT_TS_06_02_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the circular region validity restriction which is fully inside in the circular region validity restriction of its issuing certificate */

        const charstring cc_taCert0603_BV := "CERT_TS_06_03_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the circular region validity restriction which is fully inside in the rectangular region validity restriction of its issuing certificate */

        const charstring cc_taCert0604_BV := "CERT_TS_06_04_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the circular region validity restriction which is fully inside in the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0605_BV := "CERT_TS_06_05_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the circular region validity restriction which is fully inside in the identified region validity restriction of its issuing certificate */

        const charstring cc_taCert0606_BO := "CERT_TS_06_06_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message does not contain the region validity restriction but its issuing certificate contains the circular region validity restriction */

        const charstring cc_taCert0607_BO := "CERT_TS_06_07_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains circular region validity restriction which is outside of the circular region validity restriction of its issuing certificate */

        const charstring cc_taCert0608_BO := "CERT_TS_06_08_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains circular region validity restriction which is not fully covered by the the circular region validity restriction of its issuing certificate */

        const charstring cc_taCert0701_BV := "CERT_TS_07_01_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the same rectangular region validity restriction as its issuing certificate */

        const charstring cc_taCert0702_BV := "CERT_TS_07_02_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the rectangular region validity restriction which is fully inside in the circular region validity restriction of its issuing certificate */

        const charstring cc_taCert0703_BV := "CERT_TS_07_03_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the validity restriction with rectangular region which is fully inside in the rectangular region validity restriction of its issuing certificate */

        const charstring cc_taCert0704_BV := "CERT_TS_07_04_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the rectangular region validity restriction which is fully inside in the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0705_BV := "CERT_TS_07_05_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the rectangular region validity restriction which is fully inside in the identified region validity restriction of its issuing certificate */

        const charstring cc_taCert0706_BO := "CERT_TS_07_06_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message does not contain the region validity restriction but its issuing certificate contains the rectangular region validity restriction */

        const charstring cc_taCert0707_BO := "CERT_TS_07_07_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains rectangular region validity restriction which is outside of the rectangular region validity restriction of its issuing certificate */

        const charstring cc_taCert0708_BO := "CERT_TS_07_08_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains rectangular region validity restriction which is not fully covered by the the rectangular region validity restriction of its issuing certificate */

        const charstring cc_taCert0801_BV := "CERT_TS_08_01_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the same polygonal region validity restriction as its issuing certificate */

        const charstring cc_taCert0802_BV := "CERT_TS_08_02_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the circular region validity restriction of its issuing certificate */

        const charstring cc_taCert0803_BV := "CERT_TS_08_03_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the rectangular region validity restriction of its issuing certificate */

        const charstring cc_taCert0804_BV := "CERT_TS_08_04_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0805_BV := "CERT_TS_08_05_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the identified region validity restriction of its issuing certificate */

        const charstring cc_taCert0806_BO := "CERT_TS_08_06_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message does not contain the region validity restriction but its issuing certificate contains the polygonal region validity restriction */

        const charstring cc_taCert0807_BO := "CERT_TS_08_07_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains polygonal region validity restriction which is outside of the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0808_BO := "CERT_TS_08_08_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains polygonal region validity restriction which is outside of the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0809_BO := "CERT_TS_08_09_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message contains polygonal region validity restriction which is not fully covered by the the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0901_BV := "CERT_TS_09_01_BV_AT"; /** Check that the IUT accepts a message when its signing certificate contains the identified region validity restriction with the same identified region as the issuing certificate and without local area definition  */

        const charstring cc_taCert0902_BV := "CERT_TS_09_02_BV_AT"; /** Check that the IUT accepts a message when its signing certificate contains the identified region validity restriction with the same identified region as the issuing certificate and with local area definition  */

        const charstring cc_taCert0903_BV := "CERT_TS_09_03_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the circular region validity restriction of its issuing certificate */

        const charstring cc_taCert0904_BV := "CERT_TS_09_04_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the rectangular region validity restriction of its issuing certificate */

        const charstring cc_taCert0905_BV := "CERT_TS_09_05_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of this message contains the polygonal region validity restriction which is fully inside in the polygonal region validity restriction of its issuing certificate */

        const charstring cc_taCert0906_BV := "CERT_TS_09_06_BV_AT"; /** Check that the IUT accepts a message when the signing certificate of the message contains the identified region validity restriction with the identified region which is fully covered by the identified region of the validity restriction of its issuing certificate */

        const charstring cc_taCert0907_BO := "CERT_TS_09_07_BO_AT"; /** Check that the IUT discards a message when the signing certificate of this message does not contain the region validity restriction but its issuing certificate contains the identified region validity restriction */

        const charstring cc_taCert0908_BO := "CERT_TS_09_08_BO_AT"; /** Check that the IUT discards a message when the signing certificate and its issuing certificate are both containing the identified region validity restrictions with the same region id but different local regions */

        const charstring cc_taCert0909_BO := "CERT_TS_09_09_BO_AT"; /** Check that the IUT discards a message when the identified region of the validity restriction of its signing certificate is different and not fully covered by the one in the issuing certificate */

        const charstring cc_taCert0910_BO := "CERT_TS_09_10_BO_AT"; /** Check that the IUT discards a message when the identified region validity restriction of its signing certificate contains unknown area code */

        const charstring cc_taCert0911_BO := "CERT_TS_09_11_BO_AT"; /** Check that the IUT discards a message when the identified region validity restriction of its signing certificate contains invalid area code */

        const charstring cc_taCert1001_BO := "CERT_TS_10_01_BO_AT"; /** Check that the IUT discards a message when its signing certificate does not contain the time validity restriction */

        const charstring cc_taCert1002_BO := "CERT_TS_10_02_BO_AT"; /** Check that the IUT discards a message when the issuing certificate of the message signing certificate does not contain the time validity restriction */

        const charstring cc_taCert1003_BO := "CERT_TS_10_03_BO_AT"; /** Check that the IUT discards a message when its signing certificate contains 'time_end' validity restriction */

        const charstring cc_taCert1004_BO := "CERT_TS_10_03_BO_AT"; /** Check that the IUT discards a message when its signing certificate contains 'time_start_and_duration' validity restriction */

        const charstring cc_taCert1005_BO := "CERT_TS_10_03_BO_AT"; /** Check that the IUT discards a message when the issuing certificate of the message signing certificate contains 'time_end' validity restriction */

        const charstring cc_taCert1006_BO := "CERT_TS_10_03_BO_AT"; /** Check that the IUT discards a message when its signing certificate contains 'time_start_and_duration' validity restriction */

        const charstring cc_taCert1101_BO := "CERT_TS_11_01_BO_AT"; /** Check that the IUT discards a message when the validity period of the signing certificate ends after the validity period of its issuing certificate */

        const charstring cc_taCert1102_BO := "CERT_TS_11_02_BO_AT"; /** Check that the IUT discards a message when the validity period of its signing certificate starts before the validity period of the issuing certificate */

        const charstring cc_taCert1103_BO := "CERT_TS_11_03_BO_AT"; /** Check that the IUT discards a message when the issuing certificate of signing certificate is expired but the signing certificate is not expired yet */

        const charstring cc_taCert1104_BO := "CERT_TS_11_04_BO_AT"; /** Check that the IUT discards a message when the validity period of the signing certificate is after the validity period of its issuing certificate */

        const charstring cc_taCert1201_BO := "CERT_TS_12_01_BO_AT"; /** Check that the IUT discards a message when its signing certificate does not contain the SSP-AID subject attribute */

        const charstring cc_taCert1202_BO := "CERT_TS_12_02_BO_AT"; /** Check that the IUT discards a Secured CAM when its signing certificate does not contain a record with AID_CAM in the its_aid_ssp_list subject attribute */

        const charstring cc_taCert1203_BO := "CERT_TS_12_03_BO_AT"; /** Check that the IUT discards a Secured DENM when its signing certificate does not contain a record with AID_DENM in the its_aid_ssp_list subject attribute */

        const charstring cc_taCert1204_BO := "CERT_TS_12_04_BO_AT"; /** Check that the IUT discards a Secured CAM when its signing certificate contains two records with AID_CAM in the its_aid_ssp_list subject attribute */

        const charstring cc_taCert1301_BO := "CERT_TS_13_01_BO_AT"; /** Check that the IUT discards a message when the signing AT certificate contains a CAM AID-SSP record whereas the issuing AA certificate does not contain the record with AID_CAM */

        const charstring cc_taCert1302_BO := "CERT_TS_13_02_BO_AT"; /** Check that the IUT discards a message when the signing AT certificate contains a DENM AID-SSP record whereas the issuing AA certificate does not contain the AID record with AID_DENM */

        const charstring cc_taCert1303_BO := "CERT_TS_13_03_BO_AT"; /** Check that IUT discards a SecuredMessage if the AA certificate does not contain a subject_attribute of type its_aid_list */

        const charstring cc_taCert1401_BO := "CERT_TS_14_01_BO_AT"; /** Check that IUT discards the AT certificate with signer info of type 'certificate' */

        const charstring cc_taCert1402_BO := "CERT_TS_14_02_BO_AT"; /** Check that IUT discards the AT certificate with signer info of type 'certificate_chain' */

        const charstring cc_taCert1403_BO := "CERT_TS_14_03_BO_AT"; /** Check that IUT discards the AT certificate with signer info of type 'certificate_digest_with_other_algorithm' */

        const charstring cc_taCert1501_BO := "CERT_TS_15_01_BO_AT"; /** Check that IUT discards the AA certificate with signer info of type 'certificate' */

        const charstring cc_taCert1502_BO := "CERT_TS_15_02_BO_AT"; /** Check that IUT discards the AA certificate with signer info of type 'certificate_chain' */

        const charstring cc_taCert1503_BO := "CERT_TS_15_03_BO_AT"; /** Check that IUT discards the AA certificate with signer info of type 'certificate_digest_with_other_algorithm' */

        const charstring cc_taCert1601_BO := "CERT_TS_16_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the subject_name of the AT certificate is not an empty name field */

        const charstring cc_taCert1701_BO := "CERT_TS_17_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the subject attribute of type assurance_level is missing in the AT certificate */

        const charstring cc_taCert1702_BO := "CERT_TS_17_02_BO_AT"; /** Check that IUT discards a SecuredMessage if the subject attribute of type assurance_level is missing in the AA certificate */

        const charstring cc_taCert1703_BO := "CERT_TS_17_03_BO_AT"; /** Check that IUT discards a SecuredMessage if the assurance level of issuing certificate is less then assurance level of subordinate certificate */

        const charstring cc_taCert1704_BO := "CERT_TS_17_04_BO_AT"; /** Check that IUT discards a SecuredMessage if the assurance level of issuing certificate is equal to the  assurance level of the subordinate certificate but the confidence of subject assurance of issuing certificate is less then the confidence of the subordinate certificate */

        const charstring cc_taCert1801_BO := "CERT_TS_18_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the subject attribute of type verification_key is missing in the AT certificate */

        const charstring cc_taCert1802_BO := "CERT_TS_18_02_BO_AT"; /** Check that IUT discards a SecuredMessage if the subject attribute of type verification_key is missing in the AA certificate */

        const charstring cc_taCert1901_BO := "CERT_TS_19_01_BO_AT"; /** Check that IUT discards a SecuredMessage if the reserved region type has been used in region validity restriction of the AT certificate */

        // IUT certificates & private keys

        const charstring cc_iutCert_C1    := "CERT_IUT_C1_AT";

        const charstring cc_iutCert_CA1   := "CERT_IUT_CA1_AT";

        const charstring cc_iutCert_CA2   := "CERT_IUT_CA2_AT";

        const charstring cc_iutCert_C3   := "CERT_IUT_C3_AA";

        const charstring cc_iutCert_CA3   := "CERT_IUT_CA3_AT";

        const charstring cc_iutCert_CA_AA := "CERT_IUT_CA_AA";

        const charstring cc_iutCert_CC_AA := "CERT_IUT_CC_AA";

        const charstring cc_iutCert_A     := "CERT_IUT_A_AT"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT */

        const charstring cc_iutCert_A1     := "CERT_IUT_A1_AT"; 

        const charstring cc_iutCert_A2     := "CERT_IUT_A2_AT"; 

        const charstring cc_iutCert_A3     := "CERT_IUT_A3_AT"; 

        const charstring cc_iutCert_A4     := "CERT_IUT_A4_AT"; 

        const charstring cc_iutCert_A_AA  := "CERT_IUT_A_AA"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT - NistP256*/

        const charstring cc_iutCert_A_N   := "CERT_IUT_A_N_AT";

        const charstring cc_iutCert_A_B_N := "CERT_IUT_A_B_N_AT";

        const charstring cc_iutCert_A_B   := "CERT_IUT_A_B_AT"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT - BrainpoolP256r1*/

        const charstring cc_iutCert_A_B3  := "CERT_IUT_A_B3_AT"; /** Default certificate, without region validity restriction, to be used when secured messages are sent from TA to IUT - BrainpoolP384r1*/

        const charstring cc_iutCert_A_B3_N := "CERT_IUT_A_B3_N_AT";

        const charstring cc_iutCert_B     := "CERT_IUT_B_AT"; /** Default certificate, with circular region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_iutCert_C     := "CERT_IUT_C_AT"; /** Certificate with a rectangular region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_iutCert_D     := "CERT_IUT_D_AT"; /** Certificate with a polygonal region, to be used when secured messages are sent from TA to IUT */

        const charstring cc_iutCert_E     := "CERT_IUT_E_AT"; /** Certificate with a region identifier, to be used when secured messages are sent from TA to IUT */

        const charstring cc_iutCert_F     := "CERT_IUT_F_AT"; /** Certificate with a subject type indicating 'enrolment_credentials', to be used when secured messages are sent from TA to IUT */

    /** 

     * @desc Specification of basic format elements

     * @see Draft ETSI TS 103 097 V1.1.14 Clause 4.2

     */

    group basicFormatElements {

        /**

         * @desc Service specific permissions definition for CAM

         * @see ETSI EN 302 637-2 V1.3.2 (2014-11) Clause 6.2.2.2  Service Specific Permissions (SSP)

         */

        type record SspCAM {

            Bit1        cenDsrcTollingZone,

            Bit1        publicTransport,

            Bit1        specialTransport,

            Bit1        dangerousGoods,

            Bit1        roadwork,

            Bit1        rescue,

            Bit1        emergency,

            Bit1        safetyCar,

            Bit1        closedLanes,

            Bit1        requestForRightOfWay,

            Bit1        requestForFreeCrossingAtATrafficLight,

            Bit1        noPassing,

            Bit1        noPassingForTrucks,

            Bit1        speedLimit,

            Bit18       reserved

        } // End of type SspCAM

        /**

         * @desc Service specific permissions definition for DENM

         * @member trafficCondition

         * @member accident

         * @member roadworks

         * @member adverseWeatherCondition_Adhesion

         * @member hazardousLocation_SurfaceCondition

         * @member hazardousLocation_ObstacleOnTheRoad

         * @member hazardousLocation_AnimalOnTheRoad

         * @member humanPresenceOnTheRoad

         * @member wrongWayDriving

         * @member rescueAndRecoveryWorkInProgress

         * @member adverseWeatherCondition_ExtremeWeatherCondition  

         * @member adverseWeatherCondition_Visibility

         * @member adverseWeatherCondition_Precipitation

         * @member slowVehicle

         * @member dangerousEndOfQueue

         * @member vehicleBreakdown

         * @member postCrash

         * @member humanProblem

         * @member stationaryVehicle

         * @member emergencyVehicleApproaching

         * @member hazardousLocation_DangerousCurve

         * @member collisionRisk

         * @member signalViolation

         * @member dangerousSituation

         * @member reserved                                             Reserved for Future Usage

         * @see Draft ETSI EN 302 637-3 V1.2.10 Clause 6.2.2.2  Service Specific Permissions (SSP)

         */

        type record SspDENM {

            Bit1        trafficCondition,

            Bit1        accident,

            Bit1        roadworks,

            Bit1        adverseWeatherCondition_Adhesion,

            Bit1        hazardousLocation_SurfaceCondition,

            Bit1        hazardousLocation_ObstacleOnTheRoad,

            Bit1        hazardousLocation_AnimalOnTheRoad,

            Bit1        humanPresenceOnTheRoad,

            Bit1        wrongWayDriving,

            Bit1        rescueAndRecoveryWorkInProgress,

            Bit1        adverseWeatherCondition_ExtremeWeatherCondition,

            Bit1        adverseWeatherCondition_Visibility,

            Bit1        adverseWeatherCondition_Precipitation,

            Bit1        slowVehicle,

            Bit1        dangerousEndOfQueue,

            Bit1        vehicleBreakdown,

            Bit1        postCrash,

            Bit1        humanProblem,

            Bit1        stationaryVehicle,

            Bit1        emergencyVehicleApproaching,

            Bit1        hazardousLocation_DangerousCurve,

            Bit1        collisionRisk,

            Bit1        signalViolation,

            Bit1        dangerousSituation,

            Bit8        reserved

        } // End of type SspDENM

    } // End of group certificateSpecification

    /**

     * @desc Send/receive templates for profiles for certificates

     * @see Draft ETSI TS 103 097 V1.1.14 Clause 7.4    Profiles for certificate

     */

    group profileCertificates {

        type record CertificatesCachingItem {

            HashedId8   hashedId8,

            EtsiTs103097Certificate certificate

        }

        type record of CertificatesCachingItem CertificatesCaching;

    } // End of group profileCertificates 

    type enumerated SignAlgorithm {

        e_nistp_256,

        e_brainpool_256,

        e_brainpool_384

    }

    group taConfiguration {

        /**

         * @desc Describes the Test Adapter security configuration

         * @member signingPrivateKey    Signing private keys generated by the PKI Infrastructire tool (CertChainGenerator\src\org\etsi\stf440\pki\MainApp.java)

         * @member encryptPrivateKey    Encryption private keys generated by the PKI Infrastructire tool (CertChainGenerator\src\org\etsi\stf440\pki\MainApp.java)

         * @member caCertificate        Certificates Authorization certificate generated by the PKI Infrastructire tool

         * @member aaCertificate        Enrolment Credential certificate generated by the PKI Infrastructire tool

         * @member atCertificate        Authorization Tickate certificate generated by the PKI Infrastructire tool

         * @member location             3D location associated to each configuration

         */

        /*type record TaConfig {

            Oct32           signingPrivateKey,

            Oct32           encryptPrivateKey,

            EtsiTs103097Certificate     caCertificate,

            EtsiTs103097Certificate     aaCertificate,

            EtsiTs103097Certificate     atCertificate,

            ThreeDLocation  location

        }*/ // End of type TaConfig

        /**

         * @desc Describes the Test Adapter security configurations

         */

        //type set of TaConfig TaConfigs;

    } // End of group taConfiguration

    group utPrimitives {

    }

    with {

        encode "UpperTester"

    } // End of group utPrimitives

} with {

    encode "LibItsSecurity"

} // End of module LibItsSecurity_TypesAndValues