[Opensc-commits] [OpenSC/OpenSC] 37b6f0: IsoApplet: fix EC mechanism ext_flag

[GitHub <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: 37b6f0bbdfcb88a3bd761209cab211d710cc3666
      https://github.com/OpenSC/OpenSC/commit/37b6f0bbdfcb88a3bd761209cab211d710cc3666
  Author: Philip Wendland <wen...@gm...>
  Date:   2015-05-08 (Fri, 08 May 2015)

  Changed paths:
    M src/libopensc/card-isoApplet.c

  Log Message:
  -----------
  IsoApplet: fix EC mechanism ext_flag


  Commit: 78e434da93077e5b002d364df308847c62cb76a2
      https://github.com/OpenSC/OpenSC/commit/78e434da93077e5b002d364df308847c62cb76a2
  Author: Philip Wendland <wen...@gm...>
  Date:   2015-05-08 (Fri, 08 May 2015)

  Changed paths:
    M src/pkcs11/framework-pkcs15.c

  Log Message:
  -----------
  register EC mechanisms with flags independent of RSA flags

Prior to this commit, all hashes registered for RSA or other key types were
registered for ECDSA as well.

register ECDH mechanism only when supported by card

ECDH should only be registered if the card driver sets the
SC_ALGORITHM_ECDH_CDH_RAW flag.

register software PKCS#1 (1.5) padding only when RAW RSA is supported by card

If OpenSC supports PSS/OAEP padding or other padding mechanisms in
future, and there would be a card that enforces hardware PSS/OAEP
padding, the PKCS#1 v1.5 padding mechanism should not be registered.


  Commit: 4142456c74a56c3f0a7a276f3a3711c52bb41f4b
      https://github.com/OpenSC/OpenSC/commit/4142456c74a56c3f0a7a276f3a3711c52bb41f4b
  Author: Philip Wendland <wen...@gm...>
  Date:   2015-05-08 (Fri, 08 May 2015)

  Changed paths:
    M src/libopensc/card-myeid.c
    M src/libopensc/card-piv.c
    M src/libopensc/card-sc-hsm.c

  Log Message:
  -----------
  PIV, sc-hsm, myeid: register ECDH card capabilites

Prior to 066132327c71300188aa66180fde2fb3d90c5140, CKM_ECDH1_DERIVE and
CKM_ECDH1_COFACTOR_DERIVE were always registered for cards that support
SC_ALGORITHM_ECDSA_RAW.
The mentioned commit changed this behavior, so that the ECDH mechanisms
are only registered for cards that set the SC_ALGORITHM_ECDH_CDH_RAW
capability flag.
To keep the existing behavior for the cards, they need to set this flag
in the card driver.


  Commit: 254320e34cda81720b8a102c7bbf59deff5d68ba
      https://github.com/OpenSC/OpenSC/commit/254320e34cda81720b8a102c7bbf59deff5d68ba
  Author: Philip Wendland <wen...@gm...>
  Date:   2015-05-08 (Fri, 08 May 2015)

  Changed paths:
    M src/libopensc/card-myeid.c

  Log Message:
  -----------
  myeid: seperate ECC from RSA flags

Should keep the existing behavior, but improve readability.


  Commit: 3e0356b170a3a6d2f85fce231e9e2064336671c8
      https://github.com/OpenSC/OpenSC/commit/3e0356b170a3a6d2f85fce231e9e2064336671c8
  Author: Viktor Tarasov <vik...@gm...>
  Date:   2015-05-08 (Fri, 08 May 2015)

  Changed paths:
    M src/libopensc/card-isoApplet.c
    M src/libopensc/card-piv.c

  Log Message:
  -----------
  register CKM_ECDSA and CKM_ECDSA_SHA1 depending on card capabilities

fix #429


Compare: https://github.com/OpenSC/OpenSC/compare/fd3d07a88496...3e0356b170a3