1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00
Werner Koch e730444e7b
scd:p15: Support signing with CardOS 5 cards.
* scd/app-help.c (app_help_get_keygrip_string_pk): Add optional arg
r_pkey and change all callers.
(app_help_get_keygrip_string): Ditto.
* scd/app-p15.c (struct cdf_object_s): Use bit flags
(struct aodf_object_s): Ditto.  Add field 'fid'.
(struct prkdf_object_s): Ditto.  Add fields keygrip, keyalgo, and
keynbits.
(parse_certid): Allow a keygrip instead of a certid aka keyref.
(read_ef_aodf): Store the FID.
(keygripstr_from_prkdf): Rename to ...
(keygrip_from_prkdf): this.  Remove arg r_gripstr and implement cache.
Change callers to directly use the values from the object.  Also store
the algo and length of the key ion the object.
(keyref_from_keyinfo): New. Factored out code.
(do_sign): Support SHA-256 and >2048 bit RSA keys.
common/scd:p15: Support signing with CardOS 5 cards.
* common/util.h (KEYGRIP_LEN): New.
--

This has been tested with a D-Trust card featuring 3072 bit keys.
Note that non-repudiation key for a qualified signature does not yet
work because we do not yet support rsaPSS padding.  Thus a gpgsm
--learn shows a couple of Bad Signature errors for this key.

Signed-off-by: Werner Koch <wk@gnupg.org>

Back ported from master:
- Removed do_with_keygrip
- Added KEYGRIP_LEN
- app_help_get_keygrip_string_pk actually added.
- Move keygrip_from_prkdf in do_sign before the verification.
  It used to work in master only because there it is implictly
  called prior to signing by do_with_keygrip

Signed-off-by: Werner Koch <wk@gnupg.org>
2020-04-01 16:00:31 +02:00
..
2020-03-19 15:48:12 +01:00
2015-10-28 10:20:17 +01:00
2017-04-28 10:06:33 +09:00
2015-11-17 12:50:22 +01:00
2017-04-28 10:06:33 +09:00
2019-04-16 13:27:44 +09:00
2017-02-21 13:11:46 -05:00
2019-04-16 13:27:44 +09:00
2016-03-02 14:27:30 +01:00
2017-04-28 10:06:33 +09:00
2017-02-21 13:11:46 -05:00
2017-02-21 13:11:46 -05:00
2018-10-02 14:31:56 +09:00
2017-01-05 20:43:40 +01:00
2017-02-21 13:11:46 -05:00
2019-02-12 16:30:31 +01:00
2017-02-21 13:11:46 -05:00

Common functionality used by all modules of GnuPG.