OpenPGP smartcard application implementation.
Project description
OpenPGP smartcard application implementation.
It implements parts of the OpenPGP specification 3.4.1 .
Warning
THIS IS A WORK IN PROGRESS.
it may not be fully functional
future upgrades may bring changes incompatible with previous version’s stored data
despite best attention, it may contain security holes:
it may allow access to unecpected pieces of data
cryptographic functions may contain bugs making decryption either impossible or trivial to an attacker
it may support weak cryptographic algorithms (weak hashes, …)
Fee free to play with it, review it and contribute. But DO NOT USE IT ON SENSIBLE OR VALUABLE DATA, and DO NOT IMPORT VALUABLE KEYS IN IT.
This code is in dire need for reviewing and testing.
Features
Implemented: Supposed to work, may fail nevertheless.
Missing: Known to exist, not implemented (yet ?). Contribute or express interest.
Unlisted: Not known to exist. Contribute or report existence (with links to spec, existing implementations, …).
Category |
Implemented |
Missing |
|---|---|---|
high level features |
||
passcodes |
PW1, PW3, RC |
|
passcode format |
UTF-8, KDF |
PIN block format 2 |
cryptography |
RSA: 2048, 3072, 4096 ECDH: SECP256R1, SECP384R1, SECP512R1, BRAINPOOL256R1, BRAINPOOL384R1, BRAINPOOL512R1, X25519 ECDSA: SECP256R1, SECP384R1, SECP512R1, BRAINPOOL256R1, BRAINPOOL384R1, BRAINPOOL512R1 EDDSA: ED25519 |
3DES, Elgamal, RSA <=1024, cast5, idea, blowfish, twofish, camellia |
operations |
key generation, key import, signature, decryption, authentication, key role swapping |
encryption (AES), get challenge, attestation |
hash support |
MD5, SHA1, SHA224, SHA256, SHA384, SHA512 |
RipeMD160 |
I/O |
display, biometric, button, keypad, LED loudspeaker, microphone, touchscreen |
|
private DOs |
0101, 0102, 0103, 0104 |
|
low level features |
||
serial number |
random in unmanaged space |
|
lifecycle |
blank-on-terminate |
|
protocol |
plain |
Secure Messaging |
file selection |
full DF, partial DF, path, file identifier, record identifier |
short file identifier |
role selection |
simple format |
extended format |
Usage information
Initial PIN values:
PW1 (aka user PIN): 123456
PW3 (aka admin PIN): 12345678
Reset Code: (not set)
Initial key format:
sign, authenticate: ED25519
decrypt: X25519
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
File details
Details for the file smartcard-app-openpgp-0.1.tar.gz.
File metadata
- Download URL: smartcard-app-openpgp-0.1.tar.gz
- Upload date:
- Size: 22.9 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/3.2.0 pkginfo/1.4.2 requests/2.24.0 setuptools/50.3.0 requests-toolbelt/0.8.0 tqdm/4.51.0 CPython/3.9.1rc1
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | a5c34effb842ff88e16061ec676b7f8277fdc48acc560235f95b0cc6ca935977 |
|
| MD5 | 23ec80afd069fbb40fcd61f72dd08ca5 |
|
| BLAKE2b-256 | 688ad650f15504810f4f834afc61d4c085f58f0ac387ebe843b7bb7e47531f7d |
