[Opensc-devel] Clarification request regarding the support of Yubikey Neo / 4

[Jean-Pierre M. <ope...@mu...>]

Hello everyone,

I've searched the internet for quite some time now and couldn't find a
satisfying / understandable answer, so I figured I could ask here.

I've read that the Yubikey 4 and the Yubikey Neo have a "PIV"
application which is supported via OpenSC, so I really would like to
have answers to the following (simple) questions:

  * What is the authoritative document / website that documents the
    procedure that enables the PIV application on the Yubikeys?
  * Once the PIV application is enabled, is it possible to use the
    Yubikey as a normal PKCS#11 smart card, if not what operations (if
    any) are exposed via PKCS#11? (e.g. use the PKCS#11 library for
    signing and decrypting stuff on-card with RSA / ECDH / ECDSA)
  * Assuming you can use the Yubikey as an ordinary PKCS#11 smart card,
    does it support PKCS#11 (-tool) / PKCS#15 (-tool) / custom tool
    based key-import?

I really hope you can help me with these three questions.

Best Regards

JPM