25110ec122
Remove some warnings.
2015-08-26 16:58:45 +02:00
5a2c00deb7
Add of DigestInit.
2015-08-26 16:58:45 +02:00
5f306a8d1c
Fixed x509 certificate created during generation to comply with OpenSSL
...
1.0.1i more strict rules.
2015-08-26 10:55:29 -04:00
f776ac58a3
Strip DER encoding from EC signatures.
2015-08-24 17:39:00 +02:00
e2c4e9fc2e
Use longer buffer to store the signature.
2015-08-24 14:20:01 +02:00
4fec806335
Add support for ECDSA_SHA256.
2015-08-24 13:05:27 +02:00
3150a36988
More debug messages.
2015-08-21 15:57:28 +02:00
5a069f1077
Temporary fix for multiple logins.
2015-08-21 15:41:32 +02:00
0184424f3f
Add debug messages for failed login.
2015-08-21 14:10:38 +02:00
5d7f0b3d93
Removed nspr stuff.
2015-08-21 13:20:31 +02:00
0c3c9c5a00
Close the operation after sign is done.
2015-08-21 10:42:43 +02:00
2420874125
More debug messages and precondition checks.
2015-08-21 10:42:43 +02:00
8fa6ff8edb
Use buffer length while storing cert.
2015-08-21 10:42:43 +02:00
6cbdbc3c14
More debug messages and precondition checks.
2015-08-21 10:42:43 +02:00
255815d78f
Skip PIN initialization.
2015-08-21 10:42:43 +02:00
4542a4506b
Skip token initialization.
2015-08-21 10:42:43 +02:00
f27ca3837c
Add more precondition checks and debug messages.
2015-08-21 10:42:43 +02:00
8618469619
Fixed PSS (still untested).
2015-08-21 10:42:43 +02:00
2764846bb6
add mac install_name_tool fixes for ykcs11 build
2015-08-21 10:32:40 +02:00
7573c05c82
fixup filenames and add missing headers
2015-08-21 10:15:44 +02:00
cef514eb28
drop generated files
2015-08-21 10:05:14 +02:00
aabe4fb20e
Merge branch 'master' into ykcs11
...
Conflicts:
lib/ykpiv.c
lib/ykpiv.h
2015-08-20 09:30:49 +02:00
81f3b608fd
continue looping over the readers if one fails during setup
...
also continues if a reader fails when selecting (no applet)
2015-08-20 09:25:18 +02:00
cd1e67021d
Removed unnecessary line.
2015-08-19 16:21:40 +02:00
bb4ed22315
Fixed RSA_X_509 padding.
2015-08-19 15:41:41 +02:00
a792e16333
Fixed unhashed sign mechanisms.
2015-08-19 15:20:27 +02:00
6a60c779da
More free.
2015-08-19 13:23:01 +02:00
89a212c831
Merge pull request #26 from syzzer/query-for-pin
...
Query for PIN/PUK/mgmt-key if not supplied on command line
2015-08-13 14:35:08 +02:00
723fe2f405
Query for PIN/PUK/mgmt-key if not supplied on command line
...
Do not force a user to specify the PIN/PUK/mgmt-key on the command line.
Instead, query the user to supply them through stdin when required for
the requested operation. This is both more user friendly and more
secure, since the secrets do not end up in the shell history and/or
visible to shoulder-surfers on the terminal.
Signed-off-by: Steffan Karger <steffan@karger.me >
2015-08-12 23:05:44 +02:00
de083bb27a
Fixed wrong free.
2015-08-12 17:05:47 +02:00
9c082be082
Added simple logout function.
2015-08-12 16:05:03 +02:00
df2ff3cd51
Fixed pkcs1.5 padding
2015-08-12 15:41:58 +02:00
4010ebbb91
Update object in the session (when the object wasn't there to begin with).
2015-08-11 16:54:25 +02:00
2a6acc5259
Update object in the session after key creation (if object already exists).
2015-08-11 16:28:59 +02:00
bf56cd8f30
Added certificate import on key generation.
2015-08-11 14:12:34 +02:00
097bfaf7a1
Added EC key generation.
2015-08-11 11:46:40 +02:00
bc6a0d8465
drop BLURB (not used)
2015-08-10 10:42:28 +02:00
5bef13acec
First stab at key generation.
2015-08-07 17:09:09 +02:00
6f0a9e7a09
Moved debug capabilities to its own file.
...
Fixed EC point replresentation.
2015-08-06 17:16:43 +02:00
fa2cdaa2ed
Added more attribute extraction for objects.
2015-08-06 16:22:48 +02:00
e3acd1f027
Fixed object attribute matching.
...
Added ECDSA.
2015-08-06 11:25:01 +02:00
e89de35efc
Added PSS (first stab).
2015-08-05 15:40:24 +02:00
d312d7a1e1
Added more signature infrestructure.
2015-08-04 19:19:04 +02:00
7ce5ea4dc2
Added sign_data2 to libykpiv to disable padding.
2015-08-03 16:22:58 +02:00
67ed63bc28
Hiding private objects if user is not logged in.
2015-08-03 15:16:50 +02:00
706ff894f2
Added object matching.
2015-08-03 13:31:11 +02:00
b4152b8f03
Improvement on sign and object handling.
2015-07-31 17:14:16 +02:00
175f0ff42b
First crude signature implementation plus additional refactor.
2015-07-30 17:04:24 +02:00
246cf626b2
Start to do some crypto.
2015-07-28 18:56:47 +02:00
bd144cc621
Yet another refactor of objects.
2015-07-28 17:57:56 +02:00
Alessio Di Mauro