Skip to content

Commit

Permalink
Update Finnish-FINeID.md
Browse files Browse the repository at this point in the history
Remove outdated information, add up-to-date information, improve spelling and grammar.
  • Loading branch information
tjhietala authored and frankmorgner committed Oct 8, 2024
1 parent 7e6f82c commit 06f0f57
Showing 1 changed file with 9 additions and 14 deletions.
23 changes: 9 additions & 14 deletions Finnish-FINeID.md
Original file line number Diff line number Diff line change
@@ -1,25 +1,20 @@
# Finnish FINeID

The FINeID cards are available to the private citizens and organizations.
All the new personal identity cards are FINeID cards and they are applied from the police.
(The eid certificates are also available to some banking cards and mobile SIM cards)
The FINeID cards are available to private citizens and organizations. All the new personal identity cards are eID cards and they are applied from the police.

The eid certificates are issued by the Population Register Centre (VRK).
Naturally, one cannot alter the eid certificates and keys on the cards.
The FINeID certificates are issued by the Digital and Population Data Services Agency (DVV). Naturally, one cannot alter the FINeID certificates and keys on the cards.

There are two generations of the Finnish eid cards.
OpenSC should work fine with the eid application following the version 1.x specification that is using a PKCS#15 file structure.
The version 2 of the eid specification address the ISO/IEC 7816-15 file structure and somewhat different command parameters to the version 1 specification.
There are [several generations](https://digisaatio.fi/wiki/Henkil%C3%B6kortti#Versiot) of FINeID cards. OpenSC should work fine with the eID application following the version 1.x specification that is using a PKCS#15 file structure. The version 2 of the FIN specification address the ISO/IEC 7816-15 file structure and somewhat different command parameters to the version 1 specification. The current version of the cards is not supported by OpenSC.

The support for the FINeID is implemented in [`card-setcos.c`](https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card-setcos.c) driver.
Refer there for the ATRs of supported cards.
The support for the FINeID is implemented in [`card-setcos.c`](https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card-setcos.c) driver. Refer there for the ATRs of supported cards.

The eid application has two PIN codes, one for the identification/encryption
and the other for the signing operations.
The eID card has [two PIN codes](https://dvv.fi/en/citizen-certificate-managing-pin-codes), the basic PIN (PIN1) and the signature PIN (PIN2).

The FINeID cards allow storing extra data (say, home-made PKI keypairs).

## References

* [HST wiki](http://linux.fi/wiki/HST)
* [About cards and certificates on The Finnish Digital Agency](https://dvv.fi/tietoa-varmenteista)
* [About cards and certificates at DVV](https://dvv.fi/en/about-certificates) (in English)
* [FINEID specifications at DVV](https://dvv.fi/en/fineid-specifications) (in English)
* [HST at linux.fi wiki](http://linux.fi/wiki/HST) (in Finnish)
* [Henkilökortti at digisaatio.fi wiki](https://digisaatio.fi/wiki/Henkil%C3%B6kortti) (in Finnish)

0 comments on commit 06f0f57

Please sign in to comment.