Skip to main content

OpenPGP smartcard application implementation.

Project description

OpenPGP smartcard application implementation.

It implements parts of the OpenPGP specification 3.4.1 .

Warning

THIS IS A WORK IN PROGRESS.

  • it may not be fully functional

  • future upgrades may bring changes incompatible with previous version’s stored data

  • despite best attention, it may contain security holes:

    • it may allow access to unecpected pieces of data

    • cryptographic functions may contain bugs making decryption either impossible or trivial to an attacker

  • it may support weak cryptographic algorithms (weak hashes, …)

Fee free to play with it, review it and contribute. But DO NOT USE IT ON SENSIBLE OR VALUABLE DATA, and DO NOT IMPORT VALUABLE KEYS IN IT.

This code is in dire need for reviewing and testing.

Features

Implemented: Supposed to work, may fail nevertheless.

Missing: Known to exist, not implemented (yet ?). Contribute or express interest.

Unlisted: Not known to exist. Contribute or report existence (with links to spec, existing implementations, …).

Category

Implemented

Missing

high level features

passcodes

PW1, PW3, RC

passcode format

UTF-8, KDF

PIN block format 2

cryptography

RSA: 2048, 3072, 4096

ECDH: SECP256R1, SECP384R1, SECP512R1, BRAINPOOL256R1, BRAINPOOL384R1, BRAINPOOL512R1, X25519

ECDSA: SECP256R1, SECP384R1, SECP512R1, BRAINPOOL256R1, BRAINPOOL384R1, BRAINPOOL512R1

EDDSA: ED25519

3DES, Elgamal, RSA <=1024, cast5, idea, blowfish, twofish, camellia

operations

key generation, key import, signature, decryption, authentication, key role swapping

encryption (AES), get challenge, attestation

hash support

MD5, SHA1, SHA224, SHA256, SHA384, SHA512

RipeMD160

I/O

display, biometric, button, keypad, LED loudspeaker, microphone, touchscreen

private DOs

0101, 0102, 0103, 0104

low level features

serial number

random in unmanaged space

lifecycle

blank-on-terminate

protocol

plain

Secure Messaging

file selection

full DF, partial DF, path, file identifier, record identifier

short file identifier

role selection

simple format

extended format

Usage information

Initial PIN values:

  • PW1 (aka user PIN): 123456

  • PW3 (aka admin PIN): 12345678

  • Reset Code: (not set)

Initial key format:

  • sign, authenticate: ED25519

  • decrypt: X25519

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

smartcard-app-openpgp-0.2.tar.gz (24.0 kB view details)

Uploaded Source

File details

Details for the file smartcard-app-openpgp-0.2.tar.gz.

File metadata

  • Download URL: smartcard-app-openpgp-0.2.tar.gz
  • Upload date:
  • Size: 24.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.4.2 requests/2.24.0 setuptools/50.3.0 requests-toolbelt/0.8.0 tqdm/4.51.0 CPython/3.9.1rc1

File hashes

Hashes for smartcard-app-openpgp-0.2.tar.gz
Algorithm Hash digest
SHA256 712ef483f55c9ee5b5e66f0f67f94138dc04fa5d16133481279676c35b203581
MD5 94b7670b60cf03b8403b2129b444c1f5
BLAKE2b-256 8c500514ada427c4e2cd8292a29bd06f0b95cc9a422253eb82507bd9e4ec2dab

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page