1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-06-09 23:39:51 +02:00
gnupg/scd
Werner Koch 103c1576b7
scd:p15: Support signing with CardOS 5 cards.
* scd/app-help.c (app_help_get_keygrip_string_pk): Add optional arg
r_pkey and change all callers.
(app_help_get_keygrip_string): Ditto.
* scd/app-p15.c (struct cdf_object_s): Use bit flags
(struct aodf_object_s): Ditto.  Add field 'fid'.
(struct prkdf_object_s): Ditto.  Add fields keygrip, keyalgo, and
keynbits.
(parse_certid): Allow a keygrip instead of a certid aka keyref.
(read_ef_aodf): Store the FID.
(keygripstr_from_prkdf): Rename to ...
(keygrip_from_prkdf): this.  Remove arg r_gripstr and implement cache.
Change callers to directly use the values from the object.  Also store
the algo and length of the key ion the object.
(keyref_from_keyinfo): New. Factored out code.
(do_sign): Support SHA-256 and >2048 bit RSA keys.
(do_with_keygrip): New.
(app_select_p15): Register new function.
--

This has been tested with a D-Trust card featuring 3072 bit keys.
Note that non-repudiation key for a qualified signature does not yet
work because we do not yet support rsaPSS padding.  Thus a gpgsm
--learn shows a couple of Bad Signature errors for this key.

Signed-off-by: Werner Koch <wk@gnupg.org>
2020-03-31 19:55:15 +02:00
..
apdu.c scd,pcsc: Use HANDLE for context and card. 2019-09-17 19:54:52 +09:00
apdu.h scd,pcsc: Remove the restriction of no-scanning in PC/SC. 2019-09-12 08:48:48 +09:00
app-common.h scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
app-dinsig.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
app-geldkarte.c scd: First changes to implement a PIN cache. 2020-01-07 18:45:33 +01:00
app-help.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
app-nks.c Spelling cleanup. 2020-02-18 18:07:46 -05:00
app-openpgp.c scd:openpgp: Allow PKSIGN with keygrip also for OPENPGP.3. 2020-03-27 19:37:29 +01:00
app-p15.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
app-piv.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
app-sc-hsm.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
app.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
atr.c Spelling fixes in docs and comments. 2017-04-28 10:06:33 +09:00
atr.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ccid-driver.c Spelling cleanup. 2020-02-18 18:07:46 -05:00
ccid-driver.h scd,ccid: Add 08e6:34c2 (GEMPC_EZIO). 2019-10-15 09:40:01 +09:00
ChangeLog-2011 Generate the ChangeLog from commit logs. 2011-12-01 11:09:02 +01:00
command.c scd:p15: Support signing with CardOS 5 cards. 2020-03-31 19:55:15 +02:00
iso7816.c scd: Add function for binary read in extended mode. 2020-03-31 11:53:36 +02:00
iso7816.h scd: Add function for binary read in extended mode. 2020-03-31 11:53:36 +02:00
Makefile.am scd: Add very basic support for PIV cards. 2019-01-20 11:45:57 +01:00
scdaemon-w32info.rc w32: Add icons and version information. 2013-05-07 21:35:48 +02:00
scdaemon.c gpgconf: Further simplify the gpgconf option processing. 2020-03-14 19:12:41 +01:00
scdaemon.h build: Always use EXTERN_UNLESS_MAIN_MODULE pattern. 2020-02-10 16:50:47 +01:00