chaosrebel/pico-openpgp
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-openpgp.git synced 2026-08-22 12:37:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
457 Commits 1 Branch 20 Tags
main
Commit Graph
46 Commits
Author SHA1 Message Date
Pol Henarejos 69edb21d71 Reject explicit default policy bytes 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 23:38:37 +02:00
Pol Henarejos d626852c13 Reject malformed VERIFY bodies without retry loss 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 23:36:00 +02:00
Pol Henarejos b686df8684 Require fixed-size reference change bodies 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 23:34:32 +02:00
Pol Henarejos d6362c6083 Fix error return code 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 23:32:53 +02:00
Pol Henarejos 8abf9d323e Default generated keys to no touch 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 22:21:57 +02:00
Pol Henarejos 0fb3a0d7d2 Make card-authentication keys pin-free by default 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 22:19:50 +02:00
Pol Henarejos ef19c3e208 Require exact EC scalar lengths on import 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 22:18:23 +02:00
Pol Henarejos b48ae519cf Accept RSA family algorithm aliases 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 22:17:37 +02:00
Pol Henarejos 144260a633 Add regression tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 22:15:00 +02:00
Pol Henarejos 53241c74de Fix test error workflow report 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 22:07:45 +02:00
Pol Henarejos 1bb11e5f4a Move openpgp tests to tests/openpgp 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 21:29:22 +02:00
Pol Henarejos 83c886aad9 Move openpgp tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 20:37:02 +02:00
Pol Henarejos 351aa46e5d Add pytest tests for PIV 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 20:28:48 +02:00
Pol Henarejos 881d670b54 Reject truncated data object responses 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 19:45:23 +02:00
Pol Henarejos 81ee0735a4 Correct MSE template mapping 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 19:10:58 +02:00
Pol Henarejos f82c97e604 Enforce GET CHALLENGE limits and parameters 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 18:40:43 +02:00
Pol Henarejos 919f421384 Expect wrong P1P2 for invalid certificate occurrence 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 18:26:01 +02:00
Pol Henarejos d5244fc93e Keep private DOs under PW2 authorization 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 13:56:49 +02:00
Pol Henarejos 1472b26574 Fix test build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-27 12:16:15 +02:00
Pol Henarejos 33056e616e Migrate Pico OpenPGP to byte-array SDK APIs 
Update file, metadata, crypto, PIN, RNG, TLV, and object-container callers to use byte_array_t, const_byte_array_t, and stateful byte_buffer_t arguments.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-27 11:58:47 +02:00
Pol Henarejos 96a4acf84e Add container-backed storage for OpenPGP and PIV keys 
Store new key material atomically with legacy EF compatibility and power-loss coverage.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-27 00:50:26 +02:00
Pol Henarejos 64a0666e02 Add tests for short fingerprint zero-padded data. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-10 16:51:14 +02:00
Pol Henarejos a22f36e03d Add support for admin-less mode. 
In this mode, when PW1 is set equal to PW3 without being the default, it enters onto admin-less mode, where with PW1 gains admin privileges.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-10 16:37:24 +02:00
Pol Henarejos 950b4fc5ec Move tests to bookworm 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-09 18:22:39 +02:00
Pol Henarejos f1091c2fad Add libtss 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-07-09 18:10:53 +02:00
Pol Henarejos 64b1560a59 Add OpenPGP and PIV regression coverage 2026-07-09 17:26:53 +02:00
Pol Henarejos 5a7f1dd781 Migrate to the new PIN KDF system. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-04-01 16:39:16 +02:00
Pol Henarejos 615737807a Add support for private DO. 
Closes #50.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-02-17 16:46:03 +01:00
Pol Henarejos 42a13b2777 Fix start-up test script 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 19:11:53 +01:00
Pol Henarejos 1a24a9ed1b Revert "Add card personalize 2 tests" 
This reverts commit 0c46c1d25ce3c109bb8014914bd812a2a000f0ac.
 2025-05-24 14:55:23 +02:00
Pol Henarejos c39b87019e Add card personalize 2 tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-24 14:55:23 +02:00
Pol Henarejos 6de499e435 Add EdDSA support as a conditional build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 20:29:42 +01:00
Pol Henarejos e8c62e5867 Use bullseye for tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-08-25 20:58:26 +02:00
Pol Henarejos ac33f5a026 Add bullseye dockerfile. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-08-25 20:46:09 +02:00
Pol Henarejos e0daea80af Add PIV tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-03-28 01:20:48 +01:00
Pol Henarejos e3728bdb51 Update dockerfile. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-05 01:13:52 +02:00
Pol Henarejos f2c1e50ffb Fix test pw1_status 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-04 14:08:36 +01:00
Pol Henarejos e697e30c6c Add virtual smart card emulation for CD/CI. 
On each push, the software is built in a container, run as a virtual smartcard and test it.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-04 23:47:49 +01:00
Pol Henarejos 51742153d0 Adding checks for platform. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-04 23:45:31 +01:00
Pol Henarejos 1863971a1b It can be safely checked. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-04 23:45:07 +01:00
Pol Henarejos fda29e0e61 Adding verifies. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-04 01:44:44 +01:00
Pol Henarejos e914d5f576 Identify before running this test. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-03 19:17:52 +01:00
Pol Henarejos 89ed242fcd Fix historical bytes and ext capabilities test. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-03 17:44:06 +01:00
Pol Henarejos 6c81fe4b1c Fix test sex. 
By default, sex is \x30.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-03 16:49:30 +01:00
Pol Henarejos 3fe15c815c Fix returning chunked data. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-03 16:47:46 +01:00
Pol Henarejos 2c24c348b5 Adding tests for OpenPGP. 
All tests are taken from gnuk. Reader is migrated from pyusb to pyscard.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-02 23:08:49 +01:00