PivApplet icon indicating copy to clipboard operation
PivApplet copied to clipboard

Want to set yubico serial number at instantiation

Open arekinath opened this issue 5 years ago • 2 comments

In #28 and #25 it's become apparent that it would be nice to be able to customise the Yubico serial number used by the applet, probably at applet instantiation time

arekinath avatar May 13 '20 09:05 arekinath

This would potentially be useful for key derivation schemes.

I'm planning on using Thales HSMs to generate a management key at some point, and it would be nice to generate a serial number at the same time as the key, with the key being a function of the generated serial.

kategray avatar Jun 07 '20 17:06 kategray

I have an in-progress patch that has this as one of the features. I'll be doing a pull request once it's cleaned up and fleshed out.

I'm using the tag 0x80 (context sensitive) for the parameter collection, and 0xFD (from the APDU to get the serial number). I'm also going to be adding tags to set the FASC-N and CHUID, and strict contactless mode.

mistial-dev avatar Jan 12 '22 03:01 mistial-dev