PassiveAuthStatus

sealed class PassiveAuthStatus

Result of passive authentication — verifies that the data on the card was signed by the Romanian state (MAI) and has not been tampered with.

Passive auth always runs when data is read. The SDK never suppresses this result. If Invalid, the data in ReadResult is still returned — the caller must decide whether to accept or reject it.

Inheritors

Types

Link copied to clipboard
data class Invalid(val reason: String) : PassiveAuthStatus

Verification failed. Either a DG hash did not match the SOD, or the DSC did not chain to the trusted CSCA root.

Link copied to clipboard
data class Valid(val dscSubject: String, val issuer: String) : PassiveAuthStatus

All DG hashes match the SOD signature, and the Document Signing Certificate chains to the trusted CSCA root. The data is authentic.