public interface T101OpenAPI
extends javacard.framework.Shareable
| Modifier and Type | Field and Description |
|---|---|
static byte |
ACL_ALLOW_EDIT
ACL permission to allow editing of an object.
|
static byte |
ACL_ALLOW_EXEC
ACL permission to allow execution of an object.
|
static byte |
ACL_ALLOW_READ
ACL permission to allow reading of an object with export permission taking
precedence.
|
static byte |
ACT_AOC_MGMT
AOC management action flag field.
|
static byte |
ACT_OBJ_CREATE
Object create action flag field.
|
static byte |
ACT_OBJ_EXEC
Object execution action flag field.
|
static byte |
ACT_OBJ_EXPORT_PRIVATE
Object private export action flag field.
|
static byte |
ACT_OBJ_EXPORT_PUBLIC
Object public export action flag field.
|
static byte |
ACT_OBJ_FIND |
static byte |
ACT_OBJ_IMPORT
Object import action flag field.
|
static byte |
ACT_OBJ_MGMT
Object management action flag field.
|
static byte |
ACT_OBJ_SIZE
Object size action flag field.
|
static byte |
ACT_STATUS_BEGIN |
static byte |
ACT_STATUS_CANCEL |
static byte |
ACT_STATUS_FAIL |
static byte |
ACT_STATUS_FINAL |
static byte |
ACT_STATUS_SUCCESS |
static byte |
ACT_STATUS_UPDATE |
static byte |
ACT_STE_AUTH |
static byte |
ACT_STE_CRYPT |
static byte |
ACT_STE_PROC |
static byte |
ACT_USR_MGMT
User management action flag field.
|
static byte |
AOCS_LOGIN_BEGIN |
static byte |
AOCS_NONE |
static byte |
AOCS_READY |
static byte |
ATTEST_LEVEL_AOC_AUTH
Attestation at AOC Auth flag field.
|
static byte |
ATTEST_LEVEL_GLOBUSER_AUTH
Attestation at Global User Container Auth flag field.
|
static byte |
ATTEST_LEVEL_INTERMEDIATE_AUTH
Attestation at Intermediate Auth flag field.
|
static byte |
ATTEST_LEVEL_KM_AUTH
Attestation at KM Auth flag field.
|
static byte |
ATTEST_LEVEL_OBJECT
Attestation at Object Auth flag field.
|
static byte |
ATTEST_LEVEL_ROOT_AUTH
Attestation at Root Auth flag field.
|
static byte |
AUTH_FRONTPANEL
Authenticate with Front Panel flag field.
|
static byte |
AUTH_INTERNAL
Authenticate with Internal Authentication flag field.
|
static byte |
AUTH_MODE_CONTAINER_AUTH |
static byte |
AUTH_MODE_STATE_AUTH |
static byte |
AUTH_MODE_USR_AUTH |
static byte |
CRED_AOC_ADMIN_RESET_FLAG |
static byte |
CRED_CLASS_PIN
PIN credential field.
|
static byte |
CRED_CLASS_PWD
Password credential field.
|
static byte |
CRED_FIELD_ACTIVE
Credential active field.
|
static byte |
CRED_FIELD_ADMIN
Credential AOC administration field.
|
static byte |
CRED_FIELD_ATTEST
Credential creation attestation field.
|
static byte |
CRED_FIELD_CREATE
Credential creation timestamp field.
|
static byte |
CRED_FIELD_CREDID
Credential ID field.
|
static byte |
CRED_FIELD_EXPIRE
Credential expiry timestamp field.
|
static byte |
CRED_FIELD_EXPORT
Credential export field.
|
static byte |
CRED_FIELD_IDPUBKEY
Credential ID Public Key field.
|
static byte |
CRED_FIELD_MANAGEMENT
Credential Front Panel management field.
|
static byte |
CRED_FIELD_MAX_RETRIES
Credential authentication maximum retries field.
|
static byte |
CRED_FIELD_NAME
Credential name field.
|
static byte |
CRED_FIELD_OBJCTR
Credential Object Counter field.
|
static byte |
CRED_FIELD_OID
Credential Object ID field.
|
static byte |
CRED_FIELD_RETAIN_ORPHAN |
static byte |
CRED_FIELD_SECRET
Credential secret (PIN/Password) field.
|
static byte |
CRED_FIELD_SECRET_TYPE
Credential secret type field.
|
static byte |
CRED_MGMT_FRONT_PANEL
Allow credential Front Panel management field.
|
static byte |
CRED_PERM_ADMIN_FLAG |
static byte |
CRED_STAT_ACTIVE
Credential active flag field.
|
static byte |
CRED_STAT_INACTIVE
Credential inactive flag field.
|
static byte |
CRED_STAT_INIT
Credential init flag field.
|
static byte |
CRYPT_FINAL
Object crypto ops doFinal field.
|
static byte |
CRYPT_KEYGEN |
static byte |
CRYPT_LOAD
Object crypto ops load key field.
|
static byte |
CRYPT_RESET |
static byte |
CRYPT_UPDATE
Object crypto ops update field.
|
static byte |
EXEC_COMPARE |
static byte |
EXEC_CRYPT_CONTENT_EXTRACT
Object execution using cryptographic content extraction (decryption) action
flag field.
|
static byte |
EXEC_CRYPT_CONTENT_PROTECT
Object execution using cryptographic content protection (encryption or Key
Establishment with ECDH) action flag field.
|
static byte |
EXEC_CRYPT_INTEGRITY_CREATION
Object execution using cryptographic integrity creation (HMAC creation or
digital signing) action flag field.
|
static byte |
EXEC_CRYPT_INTEGRITY_VERIFICATION
Object execution using cryptographic integrity verification (HMAC
verification or digital verification) action flag field.
|
static byte |
KEY_CLASS_ASYMMETRIC
Asymmetric key object field.
|
static byte |
KEY_CLASS_SYMMETRIC
Symmetric key object field.
|
static byte |
KEY_TYPE_AES
AES key object field.
|
static byte |
KEY_TYPE_CHACHA
ChaCha20 key object field.
|
static byte |
KEY_TYPE_DES
DES key object field.
|
static byte |
KEY_TYPE_DH |
static byte |
KEY_TYPE_ECC_P256K1
ECC-P256K1 key object field.
|
static byte |
KEY_TYPE_ECC_P256R1
ECC-P256R1 key object field.
|
static byte |
KEY_TYPE_ECC_P384R1
ECC-P384R1 key object field.
|
static byte |
KEY_TYPE_ECC_P521R1
ECC-P521R1 key object field.
|
static byte |
KEY_TYPE_KMAC
HMAC key object field.
|
static byte |
KEY_TYPE_RSA
RSA key object field.
|
static byte |
LOOKUP_AVAILABLE_AOC
Lookup existing AOC field.
|
static byte |
LOOKUP_AVAILABLE_CRED_BY_ID
Lookup available GOC by ID field.
|
static byte |
LOOKUP_AVAILABLE_CRED_BY_NAME
Lookup available GOC by name field.
|
static byte |
LOOKUP_AVAILABLE_OBJ_BY_HANDLE
Lookup available object by name field.
|
static byte |
LOOKUP_COUNT_OBJ_AOC
Lookup count object field.
|
static byte |
LOOKUP_COUNT_OBJ_GLOBCRED |
static byte |
LOOKUP_HAS_FREE_AOC
Lookup for free AOC field.
|
static byte |
LOOKUP_HAS_FREE_CRED
Lookup for free GOC field.
|
static byte |
LOOKUP_HAS_FREE_OBJ
Lookup for free object field.
|
static byte |
LOOKUP_LIST_CRED
Lookup list credentials field.
|
static byte |
LOOKUP_LIST_OBJ
Lookup list object field.
|
static short |
MAX_AOC
Maximum Application Object Containers.
|
static short |
MAX_GEN_MAT_LEN
Maximum all geeric object material length in bytes.
|
static short |
MAX_GLOBAL
Maximum Global users.
|
static short |
MAX_KMAC_LEN
Maximum HMAC key length in bytes.
|
static short |
MAX_LIST_OBJ_CNT
Maximum amount of objects that can be listed in a list.
|
static short |
MAX_OBJ_PER_CRED
Maximum objects per container.
|
static short |
MAX_USERS_PER_OBJ |
static byte |
NULL |
static byte |
OBJ_EXPIRED
Check object expiry field.
|
static byte |
OBJ_EXPIRY_UNDETERMINED
Check object expiry undetermined field.
|
static byte |
OBJ_FIELD_ACL
Object ACL field.
|
static byte |
OBJ_FIELD_ATTEST
Object attestation field.
|
static byte |
OBJ_FIELD_CREATE
Object creation timestamp field.
|
static byte |
OBJ_FIELD_EXPIRE
Object expiry timestamp field.
|
static byte |
OBJ_FIELD_EXPORT
Object export field.
|
static byte |
OBJ_FIELD_HANDLE
Object handle/name field.
|
static byte |
OBJ_FIELD_ID
Object ID field.
|
static byte |
OBJ_FIELD_MATERIAL_PUBLIC
Object public material field.
|
static byte |
OBJ_FIELD_MATERIAL_SECRET
Object secret material field.
|
static byte |
OBJ_FIELD_SN |
static byte |
OBJ_FIELD_SUBTYPE_CLASS
Object subtype for key class field.
|
static byte |
OBJ_FIELD_SUBTYPE_TYPE
Object subtype for key type field.
|
static byte |
OBJ_FIELD_TYPE
Object type field.
|
static byte |
OBJ_FIELD_VER
Version field.
|
static byte |
OBJ_NOT_EXPIRED
Check object not expired field.
|
static byte |
OBJ_PERM_EXPORT_ALLOW_FLAG
Export allow permission field.
|
static byte |
OBJ_PERM_EXPORT_DENY_FLAG
Export deny permission field.
|
static byte |
OBJ_TYPE_CRED
Credential object type.
|
static byte |
OBJ_TYPE_GENERIC
Generic object type.
|
static byte |
OBJ_TYPE_KEY
Key object type
|
static byte |
UI_TYPE_INPUT
UI Input textpad flag field.
|
static byte |
UI_TYPE_LIST
UI List flag field.
|
static byte |
UI_TYPE_QR
UI QR flag field.
|
static byte |
UI_TYPE_T_USER_LIST
UI Trusted User List flag field.
|
static byte |
UI_TYPE_TEXT
UI Text flag field.
|
| Modifier and Type | Method and Description |
|---|---|
short |
bufferData(boolean isWrite,
short newMaxLen,
byte[] input,
short offset,
short len,
short buffStartOff,
byte[] output,
short outOffset)
Allows a registered applet to temporarily store larger amounts of data into a
temporary data buffer on the Key Manager's side.
|
short |
clearBuffer(byte[] output,
short outOffset)
Clears the temporary data buffer and resets the accessing applet permission
back to no specific registered applets.
|
boolean |
createAOCContainer(byte secretType,
byte[] secret,
short secretOffset,
short secretLen,
short maxRetry,
byte[] name,
short appNameOffset,
short appNameLen,
byte[] expireTS,
short expOffset)
Creates an Applet Object Container (AOC).
|
short |
cryptoChaCha20(byte[] key,
short keyOffset,
byte[] nonce,
short nonceOffset,
byte[] counter,
short ctrOffset,
byte[] input,
short inOffset,
short length,
byte[] output,
short outOffset)
Cryptographic assistant function.
|
short |
cryptoHMAC(byte hashType,
byte[] key,
short keyOffset,
short keyLength,
byte[] msg,
short mOff,
short mLen,
byte[] ipad,
short offIPad,
byte[] opad,
short offOPad,
byte[] secB,
short offSecB,
byte[] oMsg,
short outOff)
Cryptographic assistant function.
|
boolean |
deleteObject(byte[] input,
short offset,
short len,
byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short credOffset,
short credLen,
byte authMethod)
Deletes and destroys an object in an AOC container.
|
boolean |
deleteUserCred(byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte fieldType,
byte[] input,
short offset,
short len,
byte[] output,
short outOffset,
byte authMethod)
Allows a user to delete themselves from the AOC user group (thereby
destroying their credentials in the process) or for administrators to destroy
and remove non-Global users and to only remove Global users.
|
boolean |
destroyAOCContainer()
Destroys AOC container.
|
short |
executeObject(byte execMethod,
byte subOpMode1,
byte subOpMode2,
boolean useBufferedData,
byte[] objectName,
short nameOffset,
short nameLen,
byte[] input,
short offset,
short len,
byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short credOffset,
short credLen,
byte authMethod)
Execute an operation on an object.
|
short |
extendedRequest(byte[] input,
short offset,
short len,
byte[] output,
short outOffset)
Extending request of an AUTH_INTERNAL authenticated call to a function
requiring authentication.
|
boolean |
finalizeNewContainer(byte[] output,
short outOffset)
Finalize a newly created Applet Object Container.
|
short |
getAOCInfo(byte targetProfileFieldSearch,
byte[] output,
short outOffset)
Get AOC public information.
|
short |
getBufferDataLength()
Retrieves current temporary data buffer usage length.
|
short |
getObjectInfo(byte[] input,
short offset,
short len,
byte field,
byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short credOffset,
short credLen,
byte authMethod)
Get object public information.
|
short |
getObjectMaterial(byte[] input,
short offset,
short len,
boolean isPublic,
byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short credOffset,
short credLen,
byte authMethod)
Extract public/private/secret material from a generic or key object.
|
boolean |
getTime(byte[] output,
short offset)
Get the current system time from the T101's internal RTC clock.
|
short |
getUserInfo(byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte targetFieldType,
byte[] targetInput,
short targetOffset,
short targetLen,
byte targetProfileFieldSearch,
byte[] output,
short outOffset,
byte authMethod)
Get user information of other AOC users.
|
short |
hexStrToBin(byte[] input,
short offset,
byte[] output,
short outOffset,
short len)
Converts hexadecimal ASCII string representation to binary array.
|
short |
importExportObject(boolean isCredential,
byte action,
byte subAction,
byte[] input,
short offset,
short len,
byte[] secInput,
short secOffset,
short secLen,
byte[] sec1Input,
short sec1Offset,
short sec1Len,
byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte authMethod)
Allows exporting of credentials and importing and exporting of generic and
key objects from the Key Manager.
|
boolean |
importLocalGlobalUserCredToAOC(byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte[] input,
short offset,
short len,
byte[] output,
short outOffset,
byte authMethod)
Allows importing of a Global User into an AOC container user group.
|
boolean |
isSessionBusy()
Checks if the session is busy in the Key Manager.
|
short |
listAOCUsers(byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte[] output,
short outOffset,
byte authMethod)
Generates a list of all AOC users including Global Users that are part of an
AOC container regardless whether these Global Users have their Front Panel
management setting disabled.
|
short |
listObjects(byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte authMethod)
Listing of all objects in an AOC container.
|
boolean |
manageAOCContainer(byte fieldType,
byte[] input,
short offset,
short len,
byte[] output,
short outOffset)
Manage AOC container.
|
short |
manageObject(byte[] objectName,
short nameOffset,
short nameLen,
byte objectFieldType,
byte[] input,
short offset,
short len,
byte[] output,
short outOffset,
boolean isSecret,
byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte authMethod)
Manages a generic or key object.
|
boolean |
manageUserCred(byte fieldType,
byte[] input,
short offset,
short len,
byte[] output,
short outOffset,
byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte authMethod)
Management of AOC user's own credential.
|
boolean |
newAOCUserCred(byte secretType,
byte[] secret,
short secOffset,
short secLen,
short maxRetry,
byte[] username,
short usernameOffset,
short usernameLen,
byte[] expireTS,
short etsOffset,
byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte authMethod,
byte[] output,
short outOffset)
Creates a new non-Global user credential.
|
boolean |
newObject(byte objectType,
byte[] objectName,
short nameOffset,
short nameLen,
byte[] objectMat1,
short om1Offset,
short om1Len,
byte[] objectMat2,
short om2Offset,
short om2Len,
byte export,
byte acl,
byte extendedObjectClass,
byte extendedObjectType,
boolean requireAttestation,
byte[] expiryTS,
short expiryOffset,
byte credFieldType,
byte[] credInput,
short cOffset,
short cLen,
byte[] output,
short outOffset,
byte authMethod)
Creates a new generic or key object for AOC container.
 Set
expiry timestamp to 00000000 to have no expiration.expOffset
- Offset into expiry timestamp buffer.boolean finalizeNewContainer(byte[] output, short outOffset)
output
- 8 bytes of nonce to be signedoutOffset
- Offset of buffer storing 8 bytes of nonce to be signedboolean destroyAOCContainer()
boolean manageAOCContainer(byte fieldType, byte[] input, short offset, short len, byte[] output, short outOffset)
fieldType
- Field type as listed above that requires editinginput
- Input for selectors' list aboveoffset
- Offset into selectors' listlen
- Length of selector inputoutput
- 8 bytes of nonce to be signedoutOffset
- Offset of buffer storing 8 bytes of nonce to be signedshort getAOCInfo(byte targetProfileFieldSearch, byte[] output, short outOffset)
| Field | Description |
| CRED_FIELD_IDPUBKEY | Container's ECC-P256R1 Identity Public Key |
| CRED_FIELD_NAME | Container's name |
| CRED_FIELD_ACTIVE | Activity status of Container. CRED_STAT_INIT for newly initialized Container, CRED_STAT_ACTIVE for active Containers and CRED_STAT_INACTIVE for inactive Containers. |
| CRED_FIELD_MANAGEMENT | N/A |
| CRED_FIELD_CREDID | Unique user ID within AOC container environment because AOC container is itself also a limited and non-administrative special user type. |
| CRED_FIELD_SECRET_TYPE | Secret type. CRED_CLASS_PIN for PIN type and CRED_CLASS_PWD for Password type. |
| CRED_FIELD_MAX_RETRIES | Maximum authentication retry before AOC container credential is locked. Once AOC container's credential is locked, functions requiring it including UISession will not be accessible. |
| CRED_FIELD_CREATE | Creation timestamp of AOC container. 4 bytes UNIX. |
| CRED_FIELD_EXPIRE | Expiry timestamp of AOC container. 4 bytes UNIX. |
| CRED_FIELD_ATTEST | AOC container's Attestation Certificate to attest for container's creation within the T101 environment. |
| CRED_FIELD_OID | AOC Container's OID (32 byte AOC UUID). |
| CRED_FIELD_OBJCTR | AOC container's object creation counter used within Attestation Certificate generation for asymmetric keypair objects (ECC and RSA keypair types) that are natively generated within the AOC container that enables Attested Key Generation function. |
targetProfileFieldSearch
- Target search profile fieldoutput
- Output for storing public information queriedoutOffset
- Output offset for storing public information
queriedboolean newAOCUserCred(byte secretType, byte[] secret, short secOffset, short secLen, short maxRetry, byte[] username, short usernameOffset, short usernameLen, byte[] expireTS, short etsOffset, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte authMethod, byte[] output, short outOffset)
| Secret Type | Secret Description | Maximum Retry Allowed To Be Set |
| CRED_CLASS_PIN | Numerical PIN (0 to 9) with a maximum of 32 characters | 99 maximum retry allowed to be set |
| CRED_CLASS_PWD | Alpha-numerical Password with ASCII printable characters with a maximum of 32 characters | 99 maximum retry allowed to be set |
secretType
- Secret type of AOC user authentication secretsecret
- Secret buffer storing AOC user authentication secretsecOffset
- Secret buffer offset storing AOC user authentication
secretsecLen
- Secret buffer length storing AOC user authentication
secretmaxRetry
- Maximum retry for authenticating to AOC user credentialusername
- Name buffer of the AOC user with ASCII printable
non-symbolic characters allowedusernameOffset
- Offset of name bufferusernameLen
- Length of name buffer with maximum length of name to be
15 bytesexpireTS
- Expiry timestamp buffer for AOC user expiration. Set
expiry timestamp to 00000000 to have no expiration.etsOffset
- Offset into expiry timestamp buffer.credFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)output
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetboolean manageUserCred(byte fieldType, byte[] input, short offset, short len, byte[] output, short outOffset, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte authMethod)
fieldType
- Field type to manage according to table above.input
- Buffer containing field inputoffset
- Offset into buffer containing field inputlen
- Length of field contentoutput
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetcredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)boolean resetAOCUserCred(byte[] input, short offset, short len, byte[] username, short usernameOffset, short usernameLen, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte authMethod, byte[] output, short outOffset)
input
- New default credential secret (PIN/Password)offset
- New credential secret buffer offsetlen
- New credential secret length (≤ 32 bytes)username
- Name of the target AOC user to resetusernameOffset
- Buffer offset containing nameusernameLen
- Length of name of the target AOC user to resetcredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)output
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetshort listAOCUsers(byte credFieldType, byte[] credInput, short cOffset, short cLen, byte[] output, short outOffset, byte authMethod)
| Field | Field Size (bytes) | Description |
| User Position | 1 | Position of user in the AOC user list |
| User Credential ID | 1 | Unique Credential ID |
| Admin Flag | 1 | FF for administrator and 00 for normal user permission |
| Active Status | 1 | CRED_STAT_INIT for newly initialized user, CRED_STAT_ACTIVE for active user and CRED_STAT_INACTIVE for inactive user |
| Name length | 1 | Length of name |
| Name | Name length above | Name/td> |
credFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)output
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNAL otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain a list of
users in the AOC container.outOffset
- Buffer for nonce to be signed offset if AUTH_INTERNAL is
used otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain a list of
users in the AOC container.authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short getUserInfo(byte credFieldType, byte[] credInput, short cOffset, short cLen, byte targetFieldType, byte[] targetInput, short targetOffset, short targetLen, byte targetProfileFieldSearch, byte[] output, short outOffset, byte authMethod)
| Field | Description |
| CRED_FIELD_NAME | Container's name |
| CRED_FIELD_ACTIVE | Activity status of user. CRED_STAT_INIT for newly initialized user, CRED_STAT_ACTIVE for active user and CRED_STAT_INACTIVE for inactive user. |
| CRED_FIELD_MANAGEMENT | 01 for Front Panel management enabled, other values for Front Panel management disabled. Only usable for users whom are Global user type. |
| CRED_FIELD_CREDID | Unique ID to identify user within AOC environment. A highly reliable search field besides username. |
| CRED_FIELD_SECRET_TYPE | Secret type. CRED_CLASS_PIN for PIN type and CRED_CLASS_PWD for Password type. |
| CRED_FIELD_MAX_RETRIES | Maximum authentication retry before AOC user credential is locked. Once AOC container's user is locked, functions requiring it including will not be accessible. If user is an administrator or GOC user, a locked credential can NEVER be reset again. |
| CRED_FIELD_CREATE | Creation timestamp of AOC user. 4 bytes UNIX. |
| CRED_FIELD_EXPIRE | Expiry timestamp of AOC user. 4 bytes UNIX. |
| CRED_FIELD_ATTEST | N/A. |
| CRED_FIELD_OID | N/A. |
| CRED_FIELD_OBJCTR | AOC container's object creation counter used within Attestation Certificate generation for asymmetric keypair objects (ECC and RSA keypair types) that are natively generated within the AOC container that enables Attested Key Generation function. |
credFieldType
- Caller's credential field type used for
authentication (i.e. CRED_FIELD_NAME for
using username to authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length
(i.e. length of username if CRED_FIELD_NAME
is used)targetFieldType
- Field type to for querying target user (i.e.
CRED_FIELD_NAME for using username to set as
target of query)targetInput
- Buffer containing field input (i.e.
CRED_FIELD_NAME for containing username of
target user for query)targetOffset
- Offset into buffer containing field inputtargetLen
- Length of data within buffer containing field
inputtargetProfileFieldSearch
- Field for searching target useroutput
- Buffer for storing nonce to be signed if
authentication AUTH_INTERNAL otherwise when
using AUTH_FRONTPANEL, if successful, the
output buffer will contain result of a queryoutOffset
- Buffer for nonce to be signed offset if
AUTH_INTERNAL is used otherwise when using
AUTH_FRONTPANEL, if successful, the output
buffer will contain result of a queryauthMethod
- Credential authentication method
(AUTH_INTERNAL for Internal authentication
requiring an additional extendedRequest()
method or AUTH_FRONTPANEL that will use the
Front Panel for PIN/Password input)boolean importLocalGlobalUserCredToAOC(byte credFieldType, byte[] credInput, short cOffset, short cLen, byte[] input, short offset, short len, byte[] output, short outOffset, byte authMethod)
credFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)input
- Username of Global useroffset
- Offset of buffer containing username of Global userlen
- Length of Global user's usernameoutput
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetauthMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)boolean promoteAOCUserCred(byte credFieldType, byte[] credInput, short cOffset, short cLen, byte fieldType, byte[] input, short offset, short len, byte[] output, short outOffset, byte authMethod)
credFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)fieldType
- Field type used for target user to be promoted (i.e.
CRED_FIELD_NAME for using username to authenticate)input
- Buffer containing field input (i.e. CRED_FIELD_NAME for
containing username of target user for query)offset
- Offset into buffer containing field inputlen
- Length of data within buffer containing field inputoutput
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetauthMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)boolean deleteUserCred(byte credFieldType, byte[] credInput, short cOffset, short cLen, byte fieldType, byte[] input, short offset, short len, byte[] output, short outOffset, byte authMethod)
credFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)fieldType
- Field type used for target user to be promoted (i.e.
CRED_FIELD_NAME for using username to authenticate)input
- Buffer containing field input (i.e. CRED_FIELD_NAME for
containing username of target user for query)offset
- Offset into buffer containing field inputlen
- Length of data within buffer containing field inputoutput
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetauthMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)boolean newObject(byte objectType, byte[] objectName, short nameOffset, short nameLen, byte[] objectMat1, short om1Offset, short om1Len, byte[] objectMat2, short om2Offset, short om2Len, byte export, byte acl, byte extendedObjectClass, byte extendedObjectType, boolean requireAttestation, byte[] expiryTS, short expiryOffset, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte[] output, short outOffset, byte authMethod)
| Key Class | Description |
| KEY_CLASS_SYMMETRIC | Symmetric key type executing generic object or asymmetric key type |
| KEY_CLASS_ASYMMETRIC | Asymmetric key type executing generic object or symmetric key type |
| Key Type | Description |
| KEY_TYPE_AES | Symmetric AES key object with length of either 16 bytes for 128-bit, 24 bytes for 192-bit and 32 bytes for 256-bit AES key |
| KEY_TYPE_DES | Symmetric DES key object with length of either 8 bytes for DES, 16 bytes for 2DES and 24 bytes for 3DES |
| KEY_TYPE_CHACHA | Symmetric ChaCha20 key object with 256-bit fixed length |
| KEY_TYPE_RSA | Asymmetric RSA-2048 key object |
| KEY_TYPE_ECC_P256R1 | Asymmetric ECC P256R1 key object |
| KEY_TYPE_ECC_P384R1 | Asymmetric ECC P384R1 key object |
| KEY_TYPE_ECC_P521R1 | Asymmetric ECC P521R1 key object |
| KEY_TYPE_ECC_P256K1 | Asymmetric ECC P256K1 key object |
| KEY_TYPE_KMAC | Symmetric HMAC SHA256, SHA384 and SHA512 type key object |
objectType
- Generic object type OBJ_TYPE_GENERIC or Key object
type OBJ_TYPE_KEYobjectName
- Unique object name/handle within the AOC containernameOffset
- Offset into buffer containing object namenameLen
- Length of object nameobjectMat1
- Buffer containing private/secret material if
availableom1Offset
- Offset into buffer containing private/secret
material if availableom1Len
- Length of private/secret material if availableobjectMat2
- Buffer containing public material if availableom2Offset
- Offset into buffer containing public material if
availableom2Len
- Length of public material if availableexport
- Export permission setting with
OBJ_PERM_EXPORT_ALLOW_FLAG for allowing export and
OBJ_PERM_EXPORT_DENY_FLAG for denying exportacl
- ACL permissionextendedObjectClass
- Key ClassextendedObjectType
- Key TyperequireAttestation
- Whether key object requires attestationexpiryTS
- Expiry timestamp of object in 4 bytes UNIXexpiryOffset
- Offset of expiry timestampcredFieldType
- Caller's credential field type used for
authentication (i.e. CRED_FIELD_NAME for using
username to authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e.
length of username if CRED_FIELD_NAME is used)output
- Buffer for storing nonce to be signed if
authentication AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetauthMethod
- Credential authentication method (AUTH_INTERNAL
for Internal authentication requiring an
additional extendedRequest() method or
AUTH_FRONTPANEL that will use the Front Panel for
PIN/Password input)short manageObject(byte[] objectName, short nameOffset, short nameLen, byte objectFieldType, byte[] input, short offset, short len, byte[] output, short outOffset, boolean isSecret, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte authMethod)
| Editable Fields | Description |
| CRED_FIELD_NAME | Updating object name. |
| CRED_FIELD_SECRET | Updating object public/private/secret material. Updating of RSA public/private material is the same as creating new RSA key object whereby the temporary buffer is used to transport the public/private key components with the same format and procedure as used in the newObject() method which should be referenced. |
objectName
- Buffer containing object namenameOffset
- Offset into buffer containing object namenameLen
- Length of object nameobjectFieldType
- Field types for updating.input
- Buffer containing input value for updatingoffset
- Buffer offset containing input valuelen
- Buffer length of input valueoutput
- Buffer for storing nonce to be signed if
authentication AUTH_INTERNALoutOffset
- Buffer for nonce to be signed offsetisSecret
- Whether object update is dealing with private/secret
materialcredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e.
length of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short listObjects(byte[] output, short outOffset, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte authMethod)
| Field | Field Size (bytes) | Description |
| Amount of Total Objects | 1 | Total amount of objects in AOC container |
| Total Bytes | 1 | Total returned bytes of object block data |
| Current List Object Count | 1 | Current listed object counts |
| Field | Field Size (bytes) | Description |
| Object Type | 1 | OBJ_TYPE_GENERIC or OBJ_TYPE_KEY |
| Container Obj Pos Location | 1 | Position within AOC object slots |
| Container Object Flag | 1 | FF for container wide object |
| Object Name Length | 1 | Length of object name |
| Object name | 1 | Name of object |
output
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNAL otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain a list of
objectsoutOffset
- Buffer for nonce to be signed offset if AUTH_INTERNAL is
used otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain a list of
objectscredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcOffset
- Caller's authentication field input offsetcLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short getObjectInfo(byte[] input, short offset, short len, byte field, byte[] output, short outOffset, byte credFieldType, byte[] credInput, short credOffset, short credLen, byte authMethod)
| Query Field | Description |
| OBJ_FIELD_HANDLE | Name of object |
| OBJ_FIELD_ID | Object ID of an object. A unique 32 byte identifier of an object for RSA and ECC key objects. |
| OBJ_FIELD_EXPORT | Export permission of an object. OBJ_PERM_EXPORT_ALLOW_FLAG to allow export or OBJ_PERM_EXPORT_DENY_FLAG to deny export. |
| OBJ_FIELD_ACL | ACL of object. Reference newObject() method on ACL format. |
| OBJ_FIELD_SUBTYPE_CLASS | Key object class. Symmetric key object is KEY_CLASS_SYMMETRIC whereas asymmetric key object is KEY_CLASS_ASYMMETRIC. |
| OBJ_FIELD_SUBTYPE_TYPE | Key object's key type |
| OBJ_FIELD_CREATE | Object creation timestamp |
| OBJ_FIELD_EXPIRE | Object expiry timestamp |
| OBJ_FIELD_ATTEST | Object attestation certificate usually for RSA and ECC key object that have been originally created in an AOC container with key attestation |
input
- Buffer containing input value for queryingoffset
- Buffer offset containing input valuelen
- Buffer length of input valuefield
- Field types for querying.output
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNAL otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain query resultoutOffset
- Buffer for nonce to be signed offset if AUTH_INTERNAL is
used otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain query resultcredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcredOffset
- Caller's authentication field input offsetcredLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short getObjectMaterial(byte[] input, short offset, short len, boolean isPublic, byte[] output, short outOffset, byte credFieldType, byte[] credInput, short credOffset, short credLen, byte authMethod)
input
- Buffer containing object nameoffset
- Buffer offset containing object namelen
- Buffer length of object nameisPublic
- Is Public material to be extractedoutput
- Buffer for storing nonce to be signed if authentication
AUTH_INTERNAL otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain extracted
materialoutOffset
- Buffer for nonce to be signed offset if AUTH_INTERNAL is
used otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain extracted
materialcredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcredOffset
- Caller's authentication field input offsetcredLen
- Caller's authentication field input length (i.e. length
of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short executeObject(byte execMethod, byte subOpMode1, byte subOpMode2, boolean useBufferedData, byte[] objectName, short nameOffset, short nameLen, byte[] input, short offset, short len, byte[] output, short outOffset, byte credFieldType, byte[] credInput, short credOffset, short credLen, byte authMethod)
| Execution Method | Description |
| EXEC_CRYPT_INTEGRITY_CREATION | Creation of digital signatures and Message Authentication Codes via RSA and ECC signing operations for RSA and ECC key types with private keys and KMAC key types would produce HMAC (SHA256/SHA384/SHA512) results via MAC operation. |
| EXEC_CRYPT_INTEGRITY_VERIFICATION | Creation of digital signatures via RSA and ECC verification operations for RSA and ECC key types with public keys. |
| EXEC_CRYPT_CONTENT_PROTECT | Creation of encrypted content via RSA encryption operation with RSA key types with public keys. ECDH would be perform on ECC key types with ECC private keys. Symmetric encryption (AES, DES and ChaCha20) would be performed according to symmetric key types. |
| EXEC_CRYPT_CONTENT_EXTRACT | Decrypts content via RSA decryption operation with RSA key types with private keys. Symmetric decryption (AES, DES and ChaCha20) would be performed according to symmetric key types. |
| Key Type | CRYPT_LOAD | CRYPT_UPDATE | CRYPT_FINAL |
| AES | ✓ | ✓ | ✓ |
| DES | ✓ | ✓ | ✓ |
| ChaCha20 | ✗ | ✗ | ✓ |
| KMAC | ✗ | ✗ | ✓ |
| RSA | ✓ | ✓ | ✓ |
| ECC | ✓ | ✓ for EXEC_CRYPT_INTEGRITY_CREATION and EXEC_CRYPT_INTEGRITY_VERIFICATION but ✗ for EXEC_CRYPT_CONTENT_PROTECT (ECDH) operation | ✓ |
| Key Type | subOpMode2 | Description |
| AES | Cipher.ALG_AES_ECB_PKCS5, Cipher.ALG_AES_BLOCK_128_ECB_NOPAD, Cipher.ALG_AES_CBC_PKCS5, Cipher.ALG_AES_BLOCK_128_CBC_NOPAD | Refer to Oracle JCDK's Documentation for javacardx.crypto.Cipher class. |
| DES | Cipher.ALG_DES_ECB_PKCS5, Cipher.ALG_DES_ECB_NOPAD, Cipher.ALG_DES_CBC_PKCS5, Cipher.ALG_DES_CBC_NOPAD | Refer to Oracle JCDK's Documentation for javacardx.crypto.Cipher class. |
| ChaCha20 | NULL | N/A |
| KMAC | MessageDigest.ALG_SHA_256, MessageDigest.ALG_SHA_384, MessageDigest.ALG_SHA_512 | Refer to Oracle JCDK's Documentation for javacard.security.MessageDigest class. |
| RSA | Use 0x00 for subOpMode2 (Cipher.ALG_RSA_NOPAD) and 0x01 for subOpMode2 (Cipher.ALG_RSA_PKCS1) when subOpMode1 is set to EXEC_CRYPT_CONTENT_EXTRACT or EXEC_CRYPT_CONTENT_PROTECT. When subOpMode1 is in EXEC_CRYPT_INTEGRITY_CREATION or EXEC_CRYPT_INTEGRITY_VERIFICATION, then by default the subOpMode2 will not be applicable and the RSA Signature scheme will be Signature.ALG_RSA_SHA_256_PKCS1. | Refer to Oracle JCDK's Documentation for javacardx.crypto.Cipher and javacard.security.Signature classes. |
| ECC | When subOpMode1 is in EXEC_CRYPT_CONTENT_PROTECT, subOpMode2 options maybe KeyAgreement.ALG_EC_SVDP_DH, KeyAgreement.ALG_EC_SVDP_DH_PLAIN or 0x06 (ECDH_ALG_EC_SVDP_DH_PLAIN_XY). When subOpMode1 is in EXEC_CRYPT_INTEGRITY_CREATION or EXEC_CRYPT_INTEGRITY_VERIFICATION, use 0x00 for Signature.signPreComputedHash() operation and use 0x01 for specific key operation according to ECC key size. | Refer to Oracle JCDK's Documentation for javacard.security.KeyAgreement and javacard.security.Signature classes. For ECC P256R1 and ECC P256K1 type keys, 0x00 would require a SHA256 hash sized data input and for 0x01 would execute in arbitrary data length in Signature.ALG_ECDSA_SHA_256 mode. For ECC P384R1 type keys, 0x00 would require a SHA384 hash sized data input and for 0x01 would execute in arbitrary data length in Signature.ALG_ECDSA_SHA_384 mode. For ECC P521R1 type keys, 0x00 would require a SHA512 hash sized data input and for 0x01 would execute in arbitrary data length in Signature.ALG_ECDSA_SHA_512 mode. |
| Key Type | Output Description |
| AES | Encrypted or decrypted data found in output |
| DES | Encrypted or decrypted data found in output |
| ChaCha20 | Encrypted or decrypted data found in output |
| KMAC | MAC-ed data found in output |
| RSA | Returns -1 for any errors. Returns 00 for False and 01 for True when deployed in EXEC_CRYPT_INTEGRITY_VERIFICATION execMethod and CRYPT_FINAL in subOpMode1 found in the first byte of the output. In other execMethod modes, the output will contain the result itself in the form of signed data, ciphertext or plaintext outputs. |
| ECC | Returns -1 for any errors. When deployed in EXEC_CRYPT_CONTENT_PROTECT execMethod mode, returns the shared secret according to the selected subOpMode2. Returns 00 for False, 01 for True and 02 for invalid input format when deployed in EXEC_CRYPT_INTEGRITY_VERIFICATION execMethod and CRYPT_FINAL in subOpMode1 found in the first byte of the output. In EXEC_CRYPT_INTEGRITY_CREATION, the output will contain the result itself in the form of signed data. |
execMethod
- Execution method selection according to operation and
key type. Refer to table above.subOpMode1
- Execution submodes parameter 1. Refer to table above.subOpMode2
- Execution submodes parameter 2. Refer to table above.useBufferedData
- Indicator to use buffered data. Input must be buffered
to temporary buffer before calling this method. For
RSA key type's CRYPT_UPDATE and CRYPT_FINAL operation.objectName
- Buffer containing name of generic or key objectnameOffset
- Offset into buffer containing name of generic or key
objectnameLen
- Length of nameinput
- Buffer containing containing input data for
operational processingoffset
- Offset into buffer containing input datalen
- Length of input dataoutput
- Buffer for storing nonce to be signed if
authentication AUTH_INTERNAL otherwise when using
AUTH_FRONTPANEL, if successful, the output buffer will
contain processed data if availableoutOffset
- Buffer for nonce to be signed offset if AUTH_INTERNAL
is used otherwise when using AUTH_FRONTPANEL, if
successful, the output buffer will contain processed
data if availablecredFieldType
- Caller's credential field type used for authentication
(i.e. CRED_FIELD_NAME for using username to
authenticate)credInput
- Caller's authentication field inputcredOffset
- Caller's authentication field input offsetcredLen
- Caller's authentication field input length (i.e.
length of username if CRED_FIELD_NAME is used)authMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)boolean deleteObject(byte[] input, short offset, short len, byte[] output, short outOffset, byte credFieldType, byte[] credInput, short credOffset, short credLen, byte authMethod)
input
- Object handle's input bufferoffset
- Offset into the object handle's bufferlen
- Length of the object handleoutput
- Output of signed nonce to be signed if AUTH_INTERNAL is
used otherwise no output will be available except the
success or failure of operation.outOffset
- Offset of the signed nonce to be signedcredFieldType
- Caller's AOC container credential type (i.e.
CRED_FIELD_NAME for userame) authenticationcredInput
- Input buffer containing AOC container credential (i.e.
username when CRED_FIELD_NAME is used)credOffset
- Offset into the credential input buffercredLen
- Length of the credential inputauthMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short extendedRequest(byte[] input, short offset, short len, byte[] output, short outOffset)
input
- Signed nonce inputoffset
- Signed nonce offsetlen
- Signed nonce lengthoutput
- Buffer for storing expected result output from an
authenticating functionoutOffset
- Offset into the result buffershort importExportObject(boolean isCredential, byte action, byte subAction, byte[] input, short offset, short len, byte[] secInput, short secOffset, short secLen, byte[] sec1Input, short sec1Offset, short sec1Len, byte[] output, short outOffset, byte credFieldType, byte[] credInput, short cOffset, short cLen, byte authMethod)
| Action | Object Type | Import/Export Source | Import/Export Security |
| Import | Generic Object | Buffered Data via bufferData() upload | Import is not restricted. No admin required. Allow secure wrapped import |
| Import | Key Object | Buffered Data via bufferData() upload | Import is not restricted. No admin required. Allow secure wrapped import |
| Export | Generic Object | Buffered Data via bufferData() upload | Export permission and ACL READ permission applicable. Allow secure wrapped export |
| Export | Key Object | Buffered Data via bufferData() upload | Export permission and ACL READ permission applicable. Allow secure wrapped export |
| Export | Credential Object | Buffered Data via bufferData() download | No permission needed. No private key or PIN/Password will be available in exported credential. |
| Operation | Description |
| ACT_OBJ_IMPORT | Import of generic and key object types. May utilize secure wrapped imports if the import data blob requires secure wrapping/unwrapping. |
| ACT_OBJ_EXPORT_PUBLIC | Export public data. If secure wrapping is used, only a HMAC-SHA256 MAC over the export blob will be computed due to no private data being exposed, no encryption will be done. |
| ACT_OBJ_EXPORT_PRIVATE | Export private data. If secure wrapping is used, a HMAC-SDA256 MAC over the export blob will be computed and if the object contains private or secret data, the private data will be encrypted with AES-256-CBC-PKCS5 using the encryption key supplied by the caller before the MAC is computed in a Encrypt-then-MAC fashion. |
isCredential
- Indicates if import or export function is a credential
import/export operationaction
- Indicates the types of import or export operationsubAction
- If ACT_OBJ_SIZE is used in export calls to generate
estimated export size only with the total estimated
export blob will be returned as a result and no actual
export will occur otherwise an actual export will be
written to the buffered data region for reading. Import
function will omit this part.input
- Use in export of non-credential objects to specify the
object handle name for export or calculation of export
size.offset
- Input offsetlen
- Input lengthsecInput
- Security Input for AES-256 Blob Encryption KeysecOffset
- Security Input offsetsecLen
- Security Input length (must be 32 bytes or 256-bits)sec1Input
- Security Input 1 for HMAC-SHA256 Blob MAC keysec1Offset
- Security Input 1 offsetsec1Len
- Security Input 1 length (more than 0 bytes and as many
bytes as the global array can transport)output
- Output for nonce signing for AUTH_INTERNAL
authentication case. If AUTH_FRONTPANEL is used, no
output is expected.outOffset
- Output offset for storing nonce for AUTH_INTERNAL
authentication case. If AUTH_FRONTPANEL is used, no
output is expected.credFieldType
- Caller's AOC credential field type (i.e.
CRED_FIELD_NAME)credInput
- Caller's AOC credential field input (i.e. Username if
CRED_FIELD_NAME is used)cOffset
- Caller's AOC credential field offsetcLen
- Caller's AOC credential field lengthauthMethod
- Credential authentication method (AUTH_INTERNAL for
Internal authentication requiring an additional
extendedRequest() method or AUTH_FRONTPANEL that will
use the Front Panel for PIN/Password input)short cryptoChaCha20(byte[] key, short keyOffset, byte[] nonce, short nonceOffset, byte[] counter, short ctrOffset, byte[] input, short inOffset, short length, byte[] output, short outOffset)
key
- Cryptographic key bufferkeyOffset
- Key offsetnonce
- Nonce input buffernonceOffset
- Nonce input offsetcounter
- Counter input bufferctrOffset
- Counter input offsetinput
- Input message for transformation bufferinOffset
- Input message offsetlength
- Input message lengthoutput
- Output message bufferoutOffset
- Output message offsetshort cryptoHMAC(byte hashType, byte[] key, short keyOffset, short keyLength, byte[] msg, short mOff, short mLen, byte[] ipad, short offIPad, byte[] opad, short offOPad, byte[] secB, short offSecB, byte[] oMsg, short outOff)
hashType
- MessageDigest constants for hash typeskey
- Key byte array inputkeyOffset
- Key byte array offsetkeyLength
- Key byte lengthmsg
- Message byte array inputmOff
- Message input offsetmLen
- Message lengthipad
- HMAC IPAD buffer arrayoffIPad
- HMAC IPAD buffer offsetopad
- HMAC OPAD buffer arrayoffOPad
- HMAC OPAD buffer offsetsecB
- HMAC internal keystream bufferoffSecB
- HMAC internal keystream offsetoMsg
- Message output bufferoutOff
- Message output offsetshort uiSession(byte uiType, byte uiSubMode, byte uiSubMode1, byte uiSubMode2, byte uiSubMode3, byte[] title, short titleOffset, short titleLen, byte[] input, short inOffset, short inLen, byte[] output, short outOffset)
| uiType |
| UI_TYPE_T_USER_LIST |
| UI_TYPE_TEXT |
| UI_TYPE_QR |
| UI_TYPE_INPUT |
| UI_TYPE_LIST |
| UI_TYPE_T_USER_LIST Parameters | Parameter descriptions |
| uiSubMode | NULL |
| uiSubMode1 | NULL |
| uiSubMode2 | NULL |
| uiSubMode3 | NULL |
| UI_TYPE_TEXT Parameters | Parameter descriptions |
| uiSubMode | NULL |
| uiSubMode1 | NULL |
| uiSubMode2 | NULL |
| uiSubMode3 | NULL |
| UI_TYPE_QR Parameters | Parameter descriptions |
| uiSubMode | NULL |
| uiSubMode1 | NULL |
| uiSubMode2 | NULL |
| uiSubMode3 | NULL |
| UI_TYPE_INPUT Parameters | Parameter descriptions |
| uiSubMode | keypadMode (KEYPAD_PIN_MODE = 01, KEYPAD_ALPHA_MODE = 02, KEYPAD_ALPHA_SMALL_MODE = 03, KEYPAD_HEX_MODE = 04, KEYPAD_SYM_MODE = 05) |
| uiSubMode1 | keypadSubMode (KEYPAD_RESTRICT_PIN_ONLY = 01, KEYPAD_RESTRICT_ALPHA_ONLY = 01, KEYPAD_RESTRICT_SYM_ACCESS = 02) |
| uiSubMode2 | isSecret (0xFF for True) |
| uiSubMode3 | maximum input length ≤ 128 |
| UI_TYPE_LIST Parameters | Parameter descriptions |
| uiSubMode | loop (FF - true, 00 - false) |
| uiSubMode1 | itemCount not more than 6 items |
| uiSubMode2 | NULL |
| uiSubMode3 | NULL |
| uiType | Input description |
| UI_TYPE_T_USER_LIST | No input required. |
| UI_TYPE_TEXT | Printable ASCII characters with length up to maximum of 128 bytes |
| UI_TYPE_QR | Binary length up to maximum of 128 bytes |
| UI_TYPE_INPUT | Printable ASCII characters with length up to maximum of 16 bytes |
| UI_TYPE_LIST | Array of bytes consisting of length in 1 byte followed by data content of
printable ASCII characters of not more than 15 bytes per item. [Item1Len][Item1] ... [ItemNLen][ItemN]. |
| uiType | Output and return value description |
| UI_TYPE_T_USER_LIST | Default return value is 1. Output will be a 1 byte containing user position in AOC user group list. |
| UI_TYPE_TEXT | Returns 0 for Cancel button press. Returns 1 for OK button press. Returns 2 for either timeout session. No output. |
| UI_TYPE_QR | Returns 0 for Cancel button press. Returns 1 for OK button press. Returns 2 for either timeout session. No output. |
| UI_TYPE_INPUT | Returns length of input. Output contains input content. |
| UI_TYPE_LIST | Array of bytes consisting of length in 1 byte followed by data content of
printable ASCII characters of not more than 15 bytes per item. [Item1Len][Item1] ... [ItemNLen][ItemN]. |
uiType
- View above table for acceptable uiType.uiSubMode
- View above table for acceptable uiSubMode.uiSubMode1
- View above table for acceptable uiSubMode1.uiSubMode2
- View above table for acceptable uiSubMode2.uiSubMode3
- View above table for acceptable uiSubMode3.title
- Title (Printable non-symbolic ASCII with a length of 9
characters as maximum)titleOffset
- Offset of titletitleLen
- Title lengthinput
- Input data for processing or displayinOffset
- Offset into input data for processing or displayinLen
- Length of input data for processing or displayoutput
- Output bufferoutOffset
- Output buffer offsetboolean getTime(byte[] output, short offset)
output
- 4 bytes of UNIX timstampoffset
- Output offset for UNIX timestampboolean isSessionBusy()
void resetSession()
short bufferData(boolean isWrite, short newMaxLen, byte[] input, short offset, short len, short buffStartOff, byte[] output, short outOffset)
isWrite
- Whether the buffer operation is a writing operation or
reading operationnewMaxLen
- If newMaxLen is set, it will clear the buffer if there is
no applet session assignment and create a new buffer with
the new maximum lengthinput
- For writing operation, input data for writing to the
temporary data bufferoffset
- Offset into the input data for writing operationlen
- Length of reading or writing operationbuffStartOff
- Offset into temporary buffer for writing or readingoutput
- Output for nonce to be signedoutOffset
- Output offset for storing nonceshort getBufferDataLength()
short clearBuffer(byte[] output, short outOffset)
output
- Output for nonce to be signedoutOffset
- Output offset for storing nonceshort hexStrToBin(byte[] input, short offset, byte[] output, short outOffset, short len)
input
- ASCIIfied hexadecimal representation inputoffset
- Offset into ASCIIfied hexadecimal representation inputoutput
- Output containing binary array of conversion from ASCIIfied
hexadecimal representation inputoutOffset
- Output offset for binary arraylen
- Length of input containing ASCIIfied hexadecimal
representation input


{{ content }}
{% if page.categories %}{% endif %}
Software design and development services for next-generation infrastructure software for the modern datacenter.
Day One is a journaling app for the iPhone, iPad, and Mac with an elegant interface makes journaling your life a simple pleasure.
DailyDrip gives you daily content that’s tailored to what you want to learn. It only takes about 5 minutes a day and you retain more than if you were binge learning.


Our big event that is coming on Feb 28th, is the Google Developers Group DevFest. We'd love to see you there. Find out more are devfest.mn
Our events are managed on Meetup.com sign up!


I do not work for beanstalk
I am not trying to sell beanstalk
It's just a tool that I found works for me
It is easy to contribute
Public repo space is free
Nothing is to small
drush updb -y
drush fra -y
drush cc all
curl https://raw.github.com/sanguis/drupal-beanstalk-post-deployment-scripts/master/development.sh > /tmp/%USER_NAME%-%REVISION%.sh
bash /tmp/%USER_NAME%-%REVISION%.sh "%COMMENT%" %REVISION% %USER_NAME%
"git commit -am "Just upgraded drupal 7.26. -updb-"


--- layout: page title: "About" description: "what I do." header-img: "img/about-bg.jpg" ---
I analyze processes in technology and people systems, toward an articulation of their dissemination, experimentation, and reorganization into new processes and systems.
Or more simply: I break it down, play with it, put it back together in new, fun ways that might help others learn about themselves or approach the problem they're facing.


NHANES: Data from the US National Health and Nutrition Examination Study
Body Shape and related measurements from the US National Health
and Nutrition Examination Survey (NHANES, 1999-2004). See
http://www.cdc.gov/nchs/nhanes.htm for details.
| Version: |
2.1.0 |
| Depends: |
R (≥ 3.0) |
| Suggests: |
mosaic |
| Published: |
2015-07-02 |
| Author: |
Randall Pruim |
| Maintainer: |
Randall Pruim <rpruim at calvin.edu> |
| License: |
GPL-2 | GPL-3 [expanded from: GPL (≥ 2)] |
| NeedsCompilation: |
no |
| Materials: |
README |
| CRAN checks: |
NHANES results |
Downloads:
Reverse dependencies:
Linking:
Please use the canonical form
https://CRAN.R-project.org/package=NHANES
to link to this page.


Usage: cppcmcconfig [options]
Print and/or change MinGW-w64 Boost configuration on Windows for cppcmc. If the program is started without options, it prints current values without making changes. The program can be launched from any directory. It will use CMAJOR_ROOT environment variable to find out locations of the configuration files.
| Long option | Short option | Description |
|---|---|---|
| ‑‑boost‑lib‑dir=BOOST_LIB_DIR | ‑L=BOOST_LIB_DIR | where BOOST_LIB_DIR is an absolute path to the subdirectory whose name is lib that is under the Boost installation directory. It contains *.a files. Effect: configures the Boost lib-directory for cppcmc. |
| ‑‑boost‑include‑dir=BOOST_INCLUDE_DIR | ‑I=BOOST_INCLUDE_DIR | where BOOST_INCLUDE_DIR is an absolute path to the subdirectory whose name is boost‑1_XX that is under the subdirectory whose name is include that is under the Boost installation directory. It contains a subdirectory whose name is boost. Effect: configures the Boost include-directory for cppcmc. |
| ‑‑boost‑version=BOOST_VERSION_NUMBER | ‑V=BOOST_VERSION_NUMBER | where BOOST_VERSION_NUMBER is the version number of Boost in format "1.XX" or "1_XX" Effect: configures the Boost version number for cppcmc. |
To see current configuration use the following command:
cppcmcconfig
The utility prints e.g.:
info: CMAJOR_ROOT=C:/cmajor BOOST_LIB_DIR: info: C:/cmajor/config/compiler-config.xml found. info: boost lib-directory (1/1) path is C:/mingw-boost/lib BOOST_INCLUDE_DIR: info: C:/cmajor/rts/build/gcc/Makefile.common found. info: boost include-directory (1/2) path is C:/mingw-boost/include/boost-1_73 info: C:/cmajor/rts/build/clang/Makefile.common found. info: boost include-directory (2/2) path is C:/mingw-boost/include/boost-1_73 BOOST_VERSION_NUMBER: info: C:/cmajor/config/tool-chains.json found. info: boost version (1/6) is 1_73 info: boost version (2/6) is 1_73 info: boost version (3/6) is 1_73 info: boost version (4/6) is 1_73 info: boost version (5/6) is 1_73 info: boost version (6/6) is 1_73
To configure boost version 1.73 that is built using MinGW-w64 gcc and installed to directory C:\mingw-boost use the following command:
cppcmcconfig --boost-lib-dir=C:/mingw-boost/lib --boost-include-dir=C:/mingw-boost/include/boost-1_73 --boost-version=1.73


City Of Tshwane Knew Of Mokgalapa’s Leaked ‘Sex’ Audio Clips
by SG EditorTshwane Mayor Stevens Mokgalapa on Sunday said he hoped authorities would get to the bottom of the leaked audio recordings, which are at the centre of a filed criminal complaint.
The City had filed a case of extortion and blackmail following the leak of audio clips, some which allegedly point to an inappropriate relationship between the mayor and his roads and transport MMC Sheila Senkubuge.
The clip, circulated on social media, purports to be a conversation between the pair and supposedly includes an intimate exchange between them.
In a statement, the City said it had known about the recordings for a number of days and had received demands for the reinstatements of four top officials.
Mokgalapa said they had refused to give in to the demands and would not sacrifice their oaths of office.


Select an image or drag and drop a JPEG-LS file. Files dropped here remain local in your browser, they are not uploaded anywhere.


The Variation observed in stock prices are highly random, and they can fluctuate over a wide range in a relatively short period of time. This makes accurate prediction extremely difficult.
However, we could still hope to make an educated guess, by analyzing the available data and with an appreciable plausibility, decide where we should(and should not) invest our money for gaining the maximum profit.
In our modern socially connected world, various sources of social media consistently plays a major role in predicting the image or relevance of any person or any company in general, thereby determining the stock prices. By extracting relevant data from a myriad of these sources, we can make good educated guesses regarding the prices of the concerned stocks. A few of these sources include:-
+ News
+ Company tweets
+ Company History
+ Industry Trends
Predicting Engine
Where should you invest?
| Factors | {[{companySelected1}]} | {[{companySelected2}]} |
|---|---|---|
| Volatility Index | {[{compTableInfo.comp1.volIndex}]} | {[{compTableInfo.comp2.volIndex}]} |
| Market Sentiments | {[{compTableInfo.comp1.marketSent}]} | {[{compTableInfo.comp2.marketSent}]} |
| TurnOver | {[{compTableInfo.comp1.turnover}]} | {[{compTableInfo.comp2.turnover}]} |
| Volume | {[{compTableInfo.comp1.volume}]} | {[{compTableInfo.comp2.volume}]} |
| Historical Data | {[{compTableInfo.comp1.mainMeasure}]} | {[{compTableInfo.comp2.mainMeasure}]} |


s
I have an id of "popup" on my page container and only look like a dialog because the link to me had a


Interaction
Run fetch
Run check
See proxies
See providers
See test URLs
Timestamps from 1970 mean "never"


×
Please feel free to choose your tickets
Sales end in 01/01/2017
{{ticket.typeTicket}}
1
2
3
4
{{ticket.nbTickets}} tickets still in stock


This sample app demonstrates the use of AngularJS as a framework for creating a simple web application, and can be used as a template to start and build your own application.
The theme mechanism, and all the reusable UI components in this application, is part of the Material Design project for AngularJs. Further information and demos can be found here: Angular Material


Read input from the microphone, for live-processing or sampling. Chrome is currently the only browser to support this feature.
Example:
input = Input().fx.add( Delay() )
// record two measures of input and delay
sampler = Sampler().record( input.fx[0], 2 )
sampler.note.seq( [.5,1,2,4,.25].rnd(), 1/2 )
// disconnect input after sampler has finished recording
input._
add
or remove
fx from the bus using this array.None worth mentioning.


--- layout: page ---
|
11:20-11:30 |
Reuben Dorent |
Learning Joint Segmentation Of Tissues And Brain Lesions From Task-Specific, Hetero-Modal, Data-Shifted Datasets |
|
11:30-11:40 |
Sophie Morse |
Focused Ultrasound And Microbubbles Get Drugs Into The Brain Efficiently And Safety In Vivo |
|
11:40-11:50 |
Sarah Mcelroy |
Simultaneous Multi-Slice bSSFP And Compressed Sensing For Myocardial Perfusion Imaging With High Spatial Resolution And Coverage |
|
11:50-12:00 |
George Keeling |
[68Ga]Ga-THP-Pam: A Bone-Targeting PET Agent With Rapid Radiolabelling |
|
12:00-12:10 |
Dana Kanel |
Neonatal White Matter Microstructure And Emotional Development During The Pre-School Years In Children Who Were Born Very Preterm |
|
12:10-12:20 |
Hannah Perry |
Multi-Gadolinium Agents For Contrast Enhancement In Magnetic Resonance Imaging |
|
14:30-14:40 |
Marina Strocchi |
A Virtual Cohort of Heart Failure Patients Four-chamber Heart Meshes for Cardiac Electro-mechanics Simulations |
|
14:40-14:50 |
Christopher Thomas |
Effect Of Bulk Density And Neural Network Voxel-Based Pseudoct Methods On Dose-Derived Rectal Toxicity Prediction In MR-Only Prostate RT |
|
14:50-15:00 |
Emma Burnhope |
Resonance Elastrography – A Novel Imaging Biomarker For Evaluating Patients At Risk Of Heart Failure With Preserved Ejection Fraction (HFpEF) |
|
15:00-15:10 |
Truc Pham |
An Iodine-124 Based Dual Positron Emission Tomography and Fluorescent Labelling Reagent for In vivo Cell Tracking |
|
15:10-15:20 |
Tianrui Zhao |
Towards A Photoacoustic Endo-Microscopy Imaging Probe |


Aatu Pitkänen
Personal website
About
Hey there, My name is Aatu Pitkänen I'm software engineering student in JAMK. This is my website!
Details
Name:
Aatu Pitkänen
Age:
23
Location:
Jyväskylä, Finland
Projects
Contact
Got something to say? feel free to send me a message


Adding an event to your site is easy.
#Getting started
Create a new .md file or copy an existing post in the _posts
directory to get started. The post file name must be in this format:
#Config for posts
#Post content
After you have setup your config, all you need to do know is write your content using markdown.
#Example Post
##Thats all folks
Thats all you need to do. Once the website is built again using jekyll build
or jekyll serve
your new event will be shown.


Installation¶
Owl requires OCaml >=4.06.0
. Please make sure you have a working OCaml environment before you start installing Owl. Here is a guide on [Install OCaml].
Owl’s installation is rather trivial. There are four possible ways as shown below, from the most straightforward one to the least one.
Option 1: Install from OPAM¶
Thanks to the folks in OCaml Labs, OPAM makes package management in OCaml much easier than before. You can simply type the following in the command line to start.
opam install owl
However, Owl’s current version on OPAM is 0.3.0
, and it lags way behind the development in master branch and misses many new features.
On the other hand, this document is tightly synchronised with the master branch. This means that you may not be able to try out the stuff I teach here. If you want to try the newest features, I recommend the other ways to install Owl, as below.
Option 2: Pull from Docker Hub¶
Owl’s docker image is perfectly synced with master branch. The image is always automatically built whenever there are new commits. You can check the building history on [Docker Hub].
You only need to pull the image then start a container.
docker pull ryanrhymes/owl
docker run -t -i ryanrhymes/owl
Besides the complete Owl system, the docker image also contains an enhanced OCaml toplevel - utop
. You can start utop
in the container and try out some examples.
The source code of Owl is stored in /root/owl directory. You can modify the source code and rebuild the system directly in the started container.
Option 3: Pin the Dev-Repo¶
opam pin
allows you to pin the local code to Owl’s development repository on Github. The first command opam depext
installs all the dependencies Owl needs.
opam depext owl
opam pin add owl --dev-repo
Option 4: Compile from Source¶
This is my favourite option. First, you need to clone the repository.
git clone git@github.com:ryanrhymes/owl.git
Second, you need to figure out the missing dependencies and install them.
jbuilder external-lib-deps --missing @install
Last, this is perhaps the most classic step.
make && make install
If your OPAM is older than V2 beta4
, you need one extra steps. This is due to a bug in OPAM which copies the compiled library into /.opam/4.06.0/lib/stubslibs
rather than /.opam/4.06.0/lib/stublibs
. If you don’t upgrade OPAM, then you need to manually move dllowl_stubs.so
file from stubslib
to stublib
folder, then everything should work.
CBLAS/LAPACKE Dependency¶
The most important dependency is OpenBLAS. Linking to the correct OpenBLAS is the key to achieve the best performance. Depending on the specific platform, you can use yum
, apt-get
, brew
to install the binary format. For example on my Mac OSX, the installation looks like this:
brew install homebrew/science/openblas
However, installing from OpenBLAS source code leads to way better performance in my own experiment. OpenBLAS already contains an implementation of LAPACKE, as long as you have a Fortran complier installed on your computer, the LAPACKE will be compiled and included in the installation automatically.
Another benefit of installing from OpenBLAS source is: some systems’ native package management tool installs very old version of OpenBLAS which misses some functions Owl requires.
Integration to Toplevel¶
Owl is well integrated with utop
. You can use utop
to try out the experiments in our tutorials. If you want utop
to automatically load Owl for you, you can also edit .ocamlinit
file in your home folder by adding the following lines. (Note that the library name is owl
with lowercase o
.)
#require "owl_top"
The owl_top
is the toplevel library of Owl, it automatically loads owl
core library and installs the corresponding pretty printers of various data types.


This sample shows how to display and hide a floating chat windows using Materialize. To make the chat work you need to enable Directline in the Bot Framework developer portal and generate a directline secret. This secret needs to be entered in the bot configuration in the source for this page.
Just click the button in the bottom right corner to display the chat. Click the button again to hide the chat windows again.


Pizza Parlor
Welcome to the Pizza Parlor! Customize which pizza you want to order and will give you the price!
Size
Small: $5.00
Medium: $7.00
Large: $10.00
Toppings: +$0.50 per topping.
Pepperoni
Cheese
Ham
Peppers
Order
Price of Order:


WITNESS LIST Business & Industry Committee March 25, 2003-2:00P HB 208 For: Bosse, Fred (Southern Crushed Concrete Inc) Risk, Raymond (Texas Construction Association) HB 322 For: O'Connor, Caroline (Texas State Employees Union) On: McAnally, Scott (Research & Oversight Council on Workers' Comp.) Vollbrecht, Stephen (State Office of Risk Management) Registering, but not testifying: For: Parker, Carl (Tex State Trooper Assn.) HB 574 For: Ellis, Randall (Lesbian Gay Rights Lobby of Texas) Garcia, Dianne Hardy (Self) Harrell, Will (ACLU, LULAC, NAACP) Herrera, Martin R. (Gay & Lesbian Community Center of San Antonio) Levy, Rick (TX AFL-CIO) Riddering, Hannah (Self and Texas National Organization for Women) Registering, but not testifying: For: O'Connor, Caroline (Self and Texas State Employees Union) Against: Gerstenschlager, MerryLynn (Self and Texas Eagle Forum) HB 1279 For: Gross, Kenneth (Self) On: Heyer, Connie (Texas Community Associations Institute and Texas Building Owners and Managers Association) HB 1366 For: Cates, Phil (Mike Nesbit & Gerald Stavely) Nesbit, Michael Edward (A Group of Texas Dry Cleaners) Reichstadt, Shirley (Self and a group of drycleaners) Stavely, Gerald (Self) On: Hardee, Jackie (TX. Commission on Environmental Quality) McAnally, Scott (Research & Oversight Council on Workers' Compensation) HB 1860 For: Williams, Steve (Houston Prof. fire fighters Local 341) On: Vollbrecht, Stephen (State Office of Risk Management) Registering, but not testifying: For: Higgins, Mike (Texas State Association of Fire Fighters) Ingersoll, Debrah (Tx. State Troopers Assn.) Parker, Carl A. (TSTA) Villarreal, Johnny (Houston Professional Fire Fighters) HB 1870 Against: Bost, Collin (American Civil Liberties Union of Texas) Bradley, Elizabeth (Self and 50th Street Caboose) Cook, Byron (Self) Fenoglio, Stepen (Self) Fleming, Mark (Students for the American Civil Liberties Union) Flint, Ross (Self and VSDA (Video Software Dealers Assc)) Markels, Gail (IDSA - Interactive Digital Software Association) Wright, Jesse (Self) Registering, but not testifying: For: Gerstenschlager, MerryLynn (Self and Texas Eagle Forum) HB 2140 For: Schaffer, Brian (Texas Association of Campground Owners (TACO)) Registering, but not testifying: For: French, Mike (Texas Manufactured Housing Association) McEwen, Clark (Texas Recreational Vehicle Association) Rowley, Jim (Texas Association of Campground Owners)


| Plugin Name | JSON |
|---|
Creates JSON files from your plugins. Adds one extra field description
which may have useful extra info.
Warning: Be sure to clean/inspect values before use. Example: aliases - literal - Should be edited down to a useful literal value.
| Plugin Name | JSON |
|---|


{% extends "sign_up_or_log_in.html" %} {% block top_message %}
I'll charge you $1 / month that you actively use the site. But I won't send you a bill until you owe at least $10.00.
I'll never sell or share your data. The only people who can see your data are you, the employees of my business, and whoever you give login information or API keys to.
I'll never spam you. I'll only email you if


February 19, 2020
November 05, 2019
August 06, 2019
May 07, 2019
Liberty Latin America Ltd. completed its Split-Off from Liberty Global plc on December 29, 2017. For public disclosures prior to this date please refer to www.libertyglobal.com


How to create an injectable service that emits a stream of values, and a UI component that subscribes to this stream, displaying its values in real time.Angular’s dependency injection mechanism allows us to cleanly separate business logic (services) from UI (components). What if our app generates a stream of values and we want to implement it as an injectable service? Here I’ll show you how to create an injectable service that emits a stream of values, and a UI component that subscribes to this stream, displaying its values in real time.
In one of my RxJS blog posts, I showed how you would use the method Observable.create() providing an observer as an argument. Let’s create a service with a method that will take an observer as an argument and emit the current time every second.
import {Observable} from 'rxjs/Observable';
export class ObservableService{
createObservableService(): ObservableCustom observable service
Current time: mediumTime // 1
`})
export class AppComponent {
currentTime: Date;
constructor(private observableService: ObservableService) { // 2
this.observableService.createObservableService() // 3
.subscribe( data => this.currentTime = data ); // 4
}
}
1. Display the time using the date pipe
2. Inject the service that wraps the observable
3. Create the observable and start emitting dates
4. Subscribe to the stream of dates
This app doesn’t use any servers, and you can see it in action in the great Stackblitz online IDE.
In the browser’s window, the current time will be updated every second. You use DatePipe here with the format 'mediumTime', which displays only hours, minutes, and seconds (all date formats are described in the DatePipe documentation).
This simple example demonstrates a basic technique for wrapping any application logic in an observable stream and subscribing to it. In this case, we use setInterval(), but you could replace it with any application-specific code that generates one or more values and sends them as a stream.
Don’t forget about error handling and completing the stream if need be. The following code snippet shows a sample observable that sends one element to the observer, may throw an error, and tells the observer that the streaming is complete:
return new Observable(
observer => {
try {
observer.next('Hello from observable');
//throw ("Got an error");
} catch(err) {
observer.error(err);
} finally{
observer.complete();
}
}
);
If you uncomment the line with a throw, observer.error() is invoked, which results in the invocation of the error handler on the subscriber if there is one.
The data producer for the observable stream was generating date/time, but it could be any app code that generates some useful values—e.g., a WebSocket server generating stock quotes, auction bids, actions of online game players, etc. During workshops, I show a sample online auction app that has a Node server emulating users’ bids on products. That server uses a WebSocket connection to push new bids for products to all users that are interested in receiving them.
Continue reading Wrapping an RxJS observable stream into an Angular service.


Spencer Hasting's Friends
Spencer Hasting has
352
Friends.
Alison
Alison
Alison
Alison
Alison
Alison
Alison
Alison
View All of Spencer Hasting's Friends


 T-bone hamburger turducken brisket ground round ball tip tongue meatball flank chuck kielbasa corned beef cow tri-tip short ribs. Meatball hamburger corned beef pig. Pancetta bresaola beef ribs, short loin beef frankfurter jowl drumstick fatback sausage short ribs turkey rump jerky t-bone.
Links are configurable, including their hover behavior. In-paragraph text can also be big, small, italicized or bold.
Blockquotes are a great way to call out text.
Not the only way, but a great way.
Code, like $this_variable
, can be embedded in any paragraph.
function sayHello() { alert "Hello World!"; }


I HEREBY request inspection, and disposition pursuant to section 79 of PD 1445, of the property enumerated above |
I CERTIFY that I have inspected each and every article enumerated in this report and that the disposition made thereof was, in my judgment, the best for the public interest. |
I CERTIFY that I have witnessed the disposition of the articles enumerated
on this _______ day of ___________________, ___________________.
|


--- name: iidn-developer-console.html title: "Inventit Iot developer Network | Tools | DeveloperConsole" layout: tools ---


the and for health countries epidemics public are The disease that WHO other African Health epidemic {background data from emergencies were []. Ebola margin IHR infectious was {border-style Accessed have px;} with #ffffff;} Africa disasters epidemics, had all emergency potential response International events period Disease during frequency preparedness Diseases Haemorrhagic more number reported security through virus which Viral global information one risk several than Global West country financing systems this Democratic Fig. Public Republic Research This analysis cross there Feb Virus also could diseases event has humanitarian international most outbreaks over pox px; region showing sources surveillance their them {font-family .World Cholera Congo Data Emergency Epidemiology Fever, Office Programme based border cases caused distribution each font-size human into need region, system temporal (%) Centre Disaster GIDEON Nigeria These United World available between case collaboration detection double; economic evaluation events, implementation led mechanisms national occurred occurrence outbreak recorded report should social these two used website year (United .WHO. Africa, Control Dec Disease, Emerging Fever However, Malaria Marburg Monitoring Region Regional Regulations Tier USD Wellcome accessed bold border-color border-width call compared countries, creating database development due end evidence funding generated identified including: major solid; spread stacked such support technical trends while {font-style {font-weight (). (Fig. All Cholera, Database Disasters EVD Epidemic Finally, For Further, Infect Infectious JEE Mar Monkey Most Organisation ProMED Report There Trust [–]. address affected analysis, approximately areas been but capacities capacity change changes climate compiled continue courier; crisis early em; epidemic, established high impact improved inadequate including increased index investing joint least limited livelihoods maps monitoring monkey not often political population preparedness. priority provide pt;} published regional review spatial specific strengthening threat time various were: where


You do not have edit permissions for cases.
Loading your teams, this will be quick I promise!
No teams to share with? Why not go ahead and create a new team!


|
Learning with Texts - Fork 2.8.1-fork
Learn foreign languages with texts
|
Display table for Improved Annotation (Edit Mode),. More...
Namespaces | |
| namespace | Lwt |
Functions | |
| make_trans ($i, $wid, $trans, $word, $lang) | |
| make_form ($textid, $wordlc) | |
| do_ajax_edit_impr_text ($textid, $wordlc) | |
Display table for Improved Annotation (Edit Mode),.
Ajax call in print_impr_text.php Call: inc/ajax_edit_impr_text.php?id=[textid]
| do_ajax_edit_impr_text | ( | $textid, | |
| $wordlc | |||
| ) |
Do the AJAX modification for editing a printed text.
| int | $textid | Text ID |
| string | $wordlc | Word lowercase. Can be left empty. |
| make_form | ( | $textid, | |
| $wordlc | |||
| ) |
Prepare the form for printed text.
| int | $textid | Text ID |
| string | $wordlc | Lowercase word |
@global string $tbpref Database table prefix.
@psalm-return array{0: string, 1: string}
| make_trans | ( | $i, | |
| $wid, | |||
| $trans, | |||
| $word, | |||
| $lang | |||
| ) |
Make the translation for a word.
| int | $i | Index |
| int | null | $wid | Word ID or null |
| string | $trans | Translation |
| string | $word | |
| int | $lang | Language ID |


Conditional Elements in HTML
Tab 1
Tab 2
Tab 3
Trigger Default
Tab 1 is selected
Tab 2 is selected
Tab 3 is selected
No known tab selected


|
cds
1.2.0
|
Non-blocking cyclic queue discovered by Philippas Tsigas and Yi Zhang. More...
#include <cds/intrusive/tsigas_cycle_queue.h>
Data Structures | |
| struct | rebind |
| Rebind template arguments. More... |
Public Types | |
| typedef T | value_type |
| type of value stored in the queue | |
| typedef options::item_counter | item_counter |
| Item counter type. | |
| typedef options::disposer | disposer |
| Item disposer. | |
| typedef options::back_off | back_off |
| back-off strategy used | |
| typedef options::memory_model | memory_model |
| Memory ordering. See cds::opt::memory_model option. |
Public Member Functions | |
| TsigasCycleQueue (size_t nCapacity=0) | |
Initialize empty queue of capacity nCapacity . | |
| ~TsigasCycleQueue () | |
| Clears the queue. | |
| size_t | size () const noexcept() |
| Returns queue's item count. | |
| size_t | capacity () const noexcept() |
| Returns capacity of cyclic buffer. | |
| bool | enqueue (value_type &data) |
| Enqueues item from the queue. | |
| value_type * | dequeue () |
| Dequeues item from the queue. | |
| bool | push (value_type &data) |
| Synonym of enqueue. | |
| value_type * | pop () |
| Synonym of dequeue. | |
| bool | empty () const |
| Checks if the queue is empty. | |
| template<typename Disposer > | |
| void | clear (Disposer f) |
| Clears queue in lock-free manner. | |
| void | clear () |
| Clears the queue. |
Non-blocking cyclic queue discovered by Philippas Tsigas and Yi Zhang.
Source:
Template arguments:
T
. Restriction: the queue can manage at least two-byte aligned data: the least significant bit (LSB) of any pointer stored in the queue must be zero since the algorithm may use LSB as a flag that marks the free cell.Options
are:
This queue algorithm does not require any garbage collector.
|
inline |
Initialize empty queue of capacity nCapacity
.
For cds::opt::v::static_buffer the nCapacity
parameter is ignored.
Note that the real capacity of queue is nCapacity
- 2.
|
inline |
Clears queue in lock-free manner.
f
parameter is a functor to dispose removed items. The interface of DISPOSER
is:
You can pass disposer
by reference using boost::ref
. The disposer will be called immediately for each item.
|
inline |
Clears the queue.
This function uses the disposer that is specified in Options
.
|
inline |
Dequeues item from the queue.
If the queue is empty the function returns NULL
Dequeue does not call value disposer. You can manually dispose returned value if it is needed.
|
inline |
Enqueues item from the queue.
Returns true
if success, false
otherwise (for example, if queue is full)
|
inline |
Returns queue's item count.
The value returned depends on opt::item_counter option. For atomicity::empty_item_counter, this function always returns 0.


{{define "home"}}
Welcome to the HX Testnet Faucet. The faucet will send {{.Amount}} HX every {{.Limit}} seconds. If you need more than this, please contact a HX community member through one of the communication methods listed on the Hybrid website.
Success! Transaction {{.Success}} has been sent. We don't have a block explorer setup at this time but stay tuned for it!


[gecode-users] graph constraints and hamiltonian path
serge lemouton
serge.lemouton at ircam.fr
Sat May 21 23:23:40 CEST 2011
Dear Christian,
Thanks for your idea, but I am not sure to understand how to implement it.
Moreover, i don't know if it will work, because what i want to do is to find a path minimizing the total distance through an ensemble of points,
and it seems to me that the "circuit" constraint will always take into account the distance between the last and the first city in the salesman itinerary, isn't it ?
It does not seem obvious to me that we can obtain the shortest path simply by removing the longest distance of the shortest circuit, but I am not an expert in hamiltonian graphs !
Serge
On 19 mai 2011, at 23:21, Christian Schulte wrote:
> Hmmm. Just thinking: how about adding an additional node that is assigned to
> lead back to the start node and then find a Hamiltonian circuit for this?
> That should work, shouldn't it? Or am I missing something.
>
> Christian
>
> --
> Christian Schulte, KTH, web.it.kth.se/~cschulte/
>
>
> -----Original Message-----
> From: users-bounces at gecode.org [mailto:users-bounces at gecode.org] On Behalf
> Of serge lemouton
> Sent: Thursday, May 19, 2011 9:32 PM
> To: users at gecode.org
> Subject: [gecode-users] graph constraints and hamiltonian path
>
> Hello,
>
> Question about graph constraints:
> I would like to modify the the TSP example in order to find the solutions
> where the travelling salesman should not return to its starting point.
> In other terms, is it possible to use the "circuit" constraint to find an
> hamiltonian path instead of a circuit ?
> Does it require to modify the code or is it better to create another
> subclass of the graph class ?
>
> Thanks for any advice,
>
> Serge Lemouton
> _______________________________________________
> Gecode users mailing list
> users at gecode.org
> https://www.gecode.org/mailman/listinfo/gecode-users
>
>
More information about the users
mailing list


Cherokee:
A Quantum Circuit Synthesizer & Simulator
Start
Step 1:
Select Number of Qubits and Stages of the Quantum circuit
Number of Qubits
1
2
3
4
5
Number of Stages
1
2
3
4
5
Step 2:
Select Quantum Gates for each stage
Simulation Results: Quantum Circuit
Simulation Results: Unitary Transformation Matrix


1. You must have installed nightELf extension [github]
2. If you are using the file:// protocol, check to see if your browser extension is a developer version.
If you use the http:// protocol, you can use the .CRX version.
3. You might use MultiToken contract and TokenConverter contract and FeeReceiver contract
MultiToken: 4rkKQpsRFt1nU6weAHuJ6CfQDqo6dxruU3K3wNUFr6ZwZYc
TokenConverter: 4QjhKLWacRXrQYpT7rzf74k5XZFCx8yF3X7FXbzKD4wwEo6
FeeReceiver: 4CBbRKd6rkCzTX5aJ2mnGrwJiHLmGdJZinoaVfMvScTEoBR
1. You need to login to the extended application first
2. Make sure you have Elf balance
you can user Buy and Sell
ELF price must be calculated by Bancor formula when purchasing
we need bancor formula in there
TxId：
Note that the calculated price is the estimated price. If you want to trade, you need to increase the price by five thousandths.（fee）
BigNumber.js or Decimal.js are recommended here.
Tt = received to token or Paid
Tf = received from token or Paid
Bf = 'from' token balance
Bt = 'to' token balance
Wf = Weight for 'from' token
Wt = Weight for 'to' token


Drag and drop an image into the box! ...or load from an image address.
This is a empty box with a probability of 100%


About Me
Full-Stack Web Developer using a background in commercial entertainment to build engaging experiences on the web. Earned a certificate in Full Stack Development from the University of Minnesota, with skills in JavaScript, CSS, React.js, Node, Express, MySQL and MongoDB. Known as a big-picture thinker and problem-solver who loves tackling a big challenge. In my previous job, I moved the company from a pen-and-paper inventory and invoicing system to a robust and user-friendly cloud-based database. I developed back-end server and routing logic and front-end experiences in a recent project, where I was the tech lead of a team of five that developed a Tinder-like web-app that connects car enthusiasts to one another. Eager to undertake complex issues with a like-minded team to create memorable experiences on the web.


--- layout: default ---
2019-nCoV is happening in China. It has killed many people.
As a Chinese citizen, I decide to writing words to record this history.
These articles covers news, numbers, policies, and my thinkings.
{{ content }} {%- include google-adsense-amp.html max-height="100" -%}


Class: Rack::AcceptMediaTypes::AcceptMediaType
- Inherits:
-
Object
- Object
- Rack::AcceptMediaTypes::AcceptMediaType
- Includes:
- Comparable
- Defined in:
- lib/sinatra/accept_media_types.rb
Overview
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.1
Instance Attribute Summary (collapse)
-
- (Object) quality
qvalue = ( "0" [ "." 0*3DIGIT ] ).
-
- (Object) range
media-range = ( "*/*"
| ( type "/" "*" ) | ( type "/" subtype ) ) *( ";" parameter ).
Instance Method Summary (collapse)
- - (Object) <=>(type)
-
- (AcceptMediaType) initialize(type)
constructor
A new instance of AcceptMediaType.
-
- (Boolean) valid?
"A weight is normalized to a real number in the range 0 through 1, where 0 is the minimum and 1 the maximum value.
Constructor Details
- (AcceptMediaType) initialize(type)
A new instance of AcceptMediaType
99 100 101 102 |
# File 'lib/sinatra/accept_media_types.rb', line 99 def initialize(type) self.range, *params = type.split(';') self.quality = extract_quality(params) end |
Instance Attribute Details
- (Object) quality
qvalue = ( "0" [ "." 0*3DIGIT ] )
| ( "1" [ "." 0*3("0") ] )
97 98 99 |
# File 'lib/sinatra/accept_media_types.rb', line 97 def quality @quality end |
- (Object) range
media-range = ( "*/*"
| ( type "/" "*" ) | ( type "/" subtype ) ) *( ";" parameter )
93 94 95 |
# File 'lib/sinatra/accept_media_types.rb', line 93 def range @range end |
Instance Method Details
- (Object) <=>(type)
104 105 106 |
# File 'lib/sinatra/accept_media_types.rb', line 104 def <=>(type) self.quality <=> type.quality end |
- (Boolean) valid?
"A weight is normalized to a real number in the range 0 through 1, where 0 is the minimum and 1 the maximum value. If a parameter has a quality value of 0, then content with this parameter is `not acceptable’ for the client."
113 114 115 |
# File 'lib/sinatra/accept_media_types.rb', line 113 def valid? self.quality.between?(0.1, 1) end |


Policewoman appreciated for her presence of mind
by Staff ReporterVIRUDHUNAGAR
A policewoman from Kariapatti police station helped in rescuing a woman from Thenur village, who had allegedly consumed poison, here on Friday.
The victim from Thenur had consumed poison and was travelling on a Tamil Nadu State Transport Corporation bus. After an alert, the bus was directed to Kariapatti police station.
Thavamani, the only policewoman at the station at that time, administered first aid to the victim and rushed her to the Kariapatti Government Hospital. The woman is currently under treatment at the hospital.
Virudhunagar District Superintendent of Police P. Perumal appreciated Ms. Thavamani on her acting with her presence of mind and rescuing the woman.
(Assistance for overcoming suicidal thoughts is available on the State’s health helpline 104 and Sneha’s suicide prevention helpline<PHONE_NUMBER>0.)


Share something or ask a question...
Topics
Databases
PHP
Machine Learning
NO SQL
C++
Latest FYP Proposals
Bitcoin prediction model, Artifical Intellegence...
Proposed by:
Dr Kamalakannan
Graph Theory Based Transmission Network Vulnerability Assessment Method for Large Electrical Grids...
Proposed by:
APU
Generator Coherency Identification using Fuzzy Logic...
Proposed by:
Li Kee Ong
Optimal Power Flow using ANN, with Environmental Considerations...
Proposed by:
Li Kee Ong


These stats update every 15 minutes.
Mytho: Welcome to Glimesh Chat! When connected your messages will start to appear here. Happy streaming!
Right click a message to view additional options.
_______________
Click send to send the above message. If you'd like, you can change the message sent. This will not change the default message


Given a sequence of elements of any (uniform) type, a hash function on the type, and an equality operation, remove any duplicates. The hash is defined to return an unsigned integer and will always return the same integer for equal elements. The benchmark should allow auxiliary data simply by defining equality on just the key.
The code must not take advantage of the specific type beyond the equality and hash functions. If the size is used the benchmark should be reported with -Z.
The input and output should be in the sequence format. The elements must be returned so that the first equal element in the input sequence is maintained and the others are removed (unless indicated with -X). Note that this only makes a difference if there is auxiliary data.
randomSeq -t int <n> <filename>
randomSeq -t int -r 100000 <n> <filename>
exptSeq -t int <n> <filename>
trigramSeq <n> <filename>
trigramSeq <n> <tmpname>
addDataSeq -t int <tmpname> <filename>


stateVector.autocouple
Set whether variables are automatically coupled to new variables in the state vector
Syntax
Description
obj = obj.autocouple
Indicate that all variables currently in the state vector should be automatically coupled to new variables added to the state vector. Coupling is transitive, so all variables in the state vector will also be coupled to one another.
Indicate whether the variables in the state vector should be automatically coupled to new variables or not. If indicating that the current variables should automatically be coupled to new variables, then the all variables currently in the state vector will also be coupled to one another.
Specify whether the listed variables should be automatically coupled to new variables added to the state vector. Coupling is transitive, so changes to autocouple settings can change the coupling status of other variables in the state vector.
If you remove variables from a set of autocoupled variables, then the listed variables will be uncoupled from the remaining variables in the autocoupling set. However, the variables removed from the autocoupling set will remain coupled to one another.
If you add variables to the set of autocoupled variables, then any unlisted variables that are already coupled to the listed variables will also be added to the set of autocoupled variables. If there are already variables in the autocoupling set, then the new variables will all be coupled to the existing autocoupled variables and will use the existing autocoupled variables as a coupling template. If there are no existing autocoupled variables, then the first listed variable will be used as the coupling template.
obj = obj.autocouple(true, variables, templateName)
Specify the coupling template to use when initializing a set of coupled variables. This syntax can only be used when there are no previously existing autocoupling variables.
Input Arguments
setting
[true|”a”|”auto”|”automatic”]: Automatically couple the variables
[false|”m”|”man”|”manual”]: Do not automatically couple the variables