Doug Engert

Have a look at: https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card-myeid.c#L722 and the APDU it sends from `myeid_set_security_env_rsa` but first some background. `sc_pkcs1_strip_digest_info_prefix` is used by some card drivers and pkcs15-sec.c. This is most likely being...

OK, I think we are close: SHA256 sends: 00 22 41 B6 0A 80 01 02 81 02 4B 01 84 01 00 Tag 0x80 = 2 = pkcs1 padding...

The above was meant to be a test, to see if the 042 value really is RFU. So you tried the patch to send 0x42? And card did not accept...

I did not answer, as I said this is very complicated and I have not looked at it in years. Anytime I need to look at it I do it...

@fabled Can you comment on this discussion? Your commit https://github.com/OpenSC/OpenSC/commit/3f832ca6da9f1659c23bd74c9db62a352c96dfa1#diff-37e30f9c78a5e1d99108d1466121e487527aa413eb132b7738345b20452923cf in April, 2019 made some changes for newer cards and included a "use the 2K signing kludge only on cards...

Yes, I am still looking at the pid issue. The pid was chosen as it is POSIX andand should work on Windows. But searching shows diferent windows compilers do thing...

Thanks for the review. Not the code is not complete, and there are a number of TODO comments. I have been trying to address these. NIST SP 800-73-4 Part 2...

Can anyone explain this failure? https://travis-ci.org/github/OpenSC/OpenSC/jobs/719919993#L1645 ``` [ERROR] testGenerateSecretECDH(com.licel.jcardsim.crypto.KeyAgreementImplTest) Time elapsed: 0.041 s

I would like to see this PR included in the next release. (This is **not** what I expressed in a recent note to @frankmorgner and @Jakuje.) There is further interest...

@Jakuje Thanks for the quick review. In regards to testing, note that `.travis.yml` was changed so `pkcs11-tool --test --login --pin` would actually do something when testing the PIV driver. It...