[Opensc-commits] [OpenSC/OpenSC] f6b0cf: pkcs15-openpgp.c Authentication key for decrypt r...

[Doug E. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: f6b0cf98165c5a4dea003483cd7f3aeeecf20804
      https://github.com/OpenSC/OpenSC/commit/f6b0cf98165c5a4dea003483cd7f3aeeecf20804
  Author: Doug Engert <dee...@gm...>
  Date:   2024-02-28 (Wed, 28 Feb 2024)

  Changed paths:
    M src/libopensc/card-openpgp.c
    M src/libopensc/pkcs15-openpgp.c

  Log Message:
  -----------
  pkcs15-openpgp.c  Authentication key for decrypt requires MSE

pkcs11-tool --test calls "test_decrypt" and test any RSA key
that supports decryption.

OpenPGP can do this for the Authentication key, but requires
the optional MANAGE SECURITY ENVIRONMENT (MSE) command.

Do not set decrypt or wrap usage bits unless MSE is supported
for the card.

Found using YubiKey NFC and Nitro start that do not support MSE.

 On branch X25519-improvements-2
 Changes to be committed:
	modified:   libopensc/pkcs15-openpgp.c


  Commit: 11b5ab8a49ff3bc0536999677c4e0fadbc5219ce
      https://github.com/OpenSC/OpenSC/commit/11b5ab8a49ff3bc0536999677c4e0fadbc5219ce
  Author: Doug Engert <dee...@gm...>
  Date:   2024-02-28 (Wed, 28 Feb 2024)

  Changed paths:
    M src/tests/p11test/openpgp_s0_ref.json

  Log Message:
  -----------
  openpgp_s0_ref.json

Without MSE, key 03 can not decrypt, encrypt, wrap or unwrap


  Commit: 818f1da8d5cd6a71360c58bae972ecad43610a6f
      https://github.com/OpenSC/OpenSC/commit/818f1da8d5cd6a71360c58bae972ecad43610a6f
  Author: Doug Engert <dee...@gm...>
  Date:   2024-02-28 (Wed, 28 Feb 2024)

  Changed paths:
    M .github/restart-pcscd.sh
    M .github/test-openpgp.sh

  Log Message:
  -----------
  Github test scripts mods to test why test-openpgp.sh sometimes fails

 Changes to be committed:
	modified:   restart-pcscd.sh
	modified:   test-openpgp.sh


Compare: https://github.com/OpenSC/OpenSC/compare/9505b5172716...818f1da8d5cd

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSC/OpenSC/settings/notifications