Skip to content

Expand Spanish DNIe background and versions, mention NFC interface #35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
AlexTMjugador wants to merge 3 commits into
base: master
Choose a base branch
from
+13 −5
Open

Expand Spanish DNIe background and versions, mention NFC interface #35

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1f47de6
Expand Spanish DNIe background and versions, mention NFC interface
AlexTMjugador Aug 5, 2026
0f5b936
Mention usage of PACE for DNIe NFC channel, back it up with a paper
AlexTMjugador Aug 5, 2026
dabd822
Use better link for the DNIe contactless interface analysis paper
AlexTMjugador Aug 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 12 additions & 4 deletions DNIe-(OpenDNIe).md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,23 +1,31 @@
# DNIe (OpenDNIe)

Support for DNIe cards got merged by code from the OpenDNIe fork, by pull request #168. The code is now in Master. OpenSC does not support the Spanish Ceres cards.
Support for DNIe cards got merged by code from the OpenDNIe fork, by pull request #168. The code is now in Master. OpenSC does not support the Spanish Ceres cards, neither DNIe 3.0 or newer cards when used through its contactless (NFC) interface.

## DNIe background

[DNIe](https://sede.sepe.gob.es/portalSede/en/firma-electronica/DNI-electronico) is one of the SpanishEid-s. Historically, there exists a patch for OpenSC which adds support for DNIe in OpenSC.
There were two different OpenSC implementations for Spanish National eID card (DNIe) support

* The official one provided by *Spanish irección General de la policía y de la Guardia Civil (DGP)* was based in OpenSC-0.11.8, released under GPLv3. It's not being currently maintained.
There were two different OpenSC implementations for first-generation Spanish National eID card (DNIe / DNI 2.0) support:

* The official one provided by *Spanish Dirección General de la Policía y de la Guardia Civil (DGP)* was based in OpenSC-0.11.8, released under GPLv3. It's not being currently maintained.
* *OpenDNIe* was an alternate LGPL implementation, written from scratch based on several documents and forums around DNIe.

From the public administration point of view the card has been procured by the Ministry of Interior (DGP's DNIe office), The chip card is a ST19WL34 provided by ST Microelectrónics and software has been procured by Fabrica Nacional De Moneda y Timbre (FNMT-RCM).
From the public administration point of view the card has been procured by the Ministry of Interior (DGP's DNIe office). The card chip is a ST19WL34 provided by ST Microelectronics, and its software has been procured by Fábrica Nacional De Moneda y Timbre (FNMT-RCM).

* The DNIe card software is closely related to FNMT's Ceres card, being very similar in structure and design.
* OpenDNIe is copyright 2011 of Juan Antonio Martinez ([GitHub](https://github.com/jonsito)).

In 2015, the DGP began issuing DNIe 3.0 cards. These cards feature an Infineon Technologies SLE78CLFX408AP dual-interface chip, enabling contactless operation via NFC through a PACE channel, which requires a card-printed CAN to be established. In practice, however, the NFC interface has been used almost exclusively by proof-of-concept Android applications distributed by CNP-FNMT through Google Play and the Spanish DNIe website, and a LGPLv3-licensed example Android app SDK. Among these, the DNIeRemote application is particularly relevant to OpenSC development, as it allows a computer to access a DNIe 3.0 card through the NFC interface of a smartphone, eliminating the need for a dedicated smart card reader, like the [Remote Smart Card Reader app provided by the vsmartcard project](https://frankmorgner.github.io/vsmartcard/remote-reader/README.html). Currently, both OpenSC and the DGP-distributed PKCS#11 DNIe module only supports DNIe 3.0 cards through the traditional contact interface, and cannot work with vsmartcard's Remote Smart Card Reader due to the different wire protocol of the NFC interface.

In 2021, the DGP began issuing DNIe 4.0 cards. According to [official sources](https://www.dnielectronico.es/PortalDNIe/PRF1_Cons02.action?pag=REF_110), this version is primarily a visual refresh of the DNIe 3.0, introduced to comply with EU Regulation 2019/1157.

Resources:

* The [official home page](http://www.dnielectronico.es) for the Spanish DNIe
* The [official page for the Spanish DNIe 3.0/4.0 electrical specifications](https://www.dnielectronico.es/PortalDNIe/PRF1_Cons02.action?pag=REF_083)
* [A technical specification sheet for the Spanish DNIe 3.0/4.0](https://www.dnielectronico.es/PDFs/CARACTERISTICAS_TECNICAS_DNIe_3.0.pdf) under the official home page domain
* [A paper discussing implementation details and a security assessment of the Spanish DNIe 3.0/4.0 contactless interface](https://ietresearch.onlinelibrary.wiley.com/doi/full/10.1049/iet-ifs.2017.0299)

## Card capabilities

Expand Down
2 changes: 1 addition & 1 deletion Supported-hardware-(smart-cards-and-USB-tokens).md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@ Supported eID cards:
* [ItalianEid](Italian-Infocamere)
* [EstonianEid](Estonian-eID-(EstEID))
* [PortugueseEid](Portuguese-eID)
* [Spanish eID](Spanish-Ceres-DNIe)
* [US CAC](US-CAC)
* [UruguayanEid](Uruguayan-eID)

Expand Down Expand Up @@ -84,7 +85,6 @@ Unclear/unsupported eID cards:
* [Belgian eID](Belgian-Belpic)
* [German EGK](German-eHBA,-eGK)
* Malaysian MyKAD
* [Spanish eID](Spanish-Ceres-DNIe)
* [Austrian eID](Austrian-"Bürgerkarte")
* Italian Postecert
* [Swedish BankID](Swedish-BankID)
Expand Down