Doug Engert
Doug Engert
One more option. rework sc-hsm-tool.c to hand handle multiple command lines, but only calling https://github.com/OpenSC/OpenSC/blob/master/src/tools/sc-hsm-tool.c#L2080-L2103 once. https://github.com/OpenSC/OpenSC/blob/master/src/tools/sc-hsm-tool.c#L2097-L2098 also selects the AID! Rename main() to main_loop() create a new main() the...
The pkcs11-tool is designed to allow easy use of PKCS11 for many operations without having to know much about PKCS11, and is designed to be used with smartcards where the...
Note that in `card.c` - `sc_read_binary`, is called by pkcs15 routines. `sc_read_binary` has a loop at https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card.c#L656-L675 to use multiple calls to `card->ops->read_binary` in your case `sc_hsm_read_binary`. But `sc_read_binary` bases...
When you do open a new issue, have a look at https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card-sc-hsm.c#L1694 Also see https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/pkcs15-sc-hsm.c#L378 This does not look big enough to return a 4096 bit pubkey + exponent in...
Are you saying a PIV card or PIV applet is required to verify the EC pubkey used as input to ECDH? I would read "5.6.2.3 Public Key Validation Routines" (see...
I modified a pub key note FF FF FF FF: ``` asn1parse -i -in /tmp/derive.3740.other.pubkey.der -inform DER -dump 0:d=0 hl=2 l= 118 cons: SEQUENCE 2:d=1 hl=2 l= 16 cons: SEQUENCE...
Here is a script [piv.test.ecdh.pub.valiation.sh.txt](https://github.com/makinako/OpenFIPS201/files/6102566/piv.test.ecdh.pub.valiation.sh.txt) with good and bad 256 and 384 APDUs for PIV. The pubkeys are from NIST demo cards 4 and 5. The bad 256 key has...
One way to do this: git clone or pull their master branch then list tags and checkout that latest tag. https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.0-relnotes.txt 11-Dec-2022 15:04 says: "We have released LibreSSL 3.7.0, which...
> The proprietary APDU is like this: 00 46 00 00 07 02 29 00 30 00 The Lc=7 does not match the 5 bytes. Is that a misprint?https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card-epass2003.c#L3037-L3055 would...
`./pkcs15-init --generate-key ec/prime256v1 -a 01 -i 03 --pin XXXXXXXX` gives the same `99 02 6A 80 8E 08 58 CD D3 B4 32 D1 4F F4 6A 80` response. This...