Commit Graph

Select branches

Hide Pull Requests

main

#17

#28

#39

#39

#43

#54

nightly-main

v1.0

v1.10

v1.12

v1.2

v1.4

v1.6

v1.8

v2.0

v2.2

v3.0

v3.2

v3.4

v3.4-eddsa1

v3.6

v4.0

v4.0-eddsa1

v4.2

v4.4

v4.6

Mono Color

• c4e7c35a67 Add support for non-validated containers main Pol Henarejos 2026-08-27 02:16:17 +02:00
• 74950e49af Return detailed error in vault init Pol Henarejos 2026-08-27 02:16:07 +02:00
• 6d671e1236 Fix default PIV pin and accept larger commands Pol Henarejos 2026-08-27 02:15:51 +02:00
• e28ef54671 Fix PIV session deriver Pol Henarejos 2026-08-27 01:13:22 +02:00
• d2ce95666d Fix PIV button presence on unlock Pol Henarejos 2026-08-26 17:15:31 +02:00
• f3407aab5c Fix PIV button handle Pol Henarejos 2026-08-26 13:10:48 +02:00
• 65e40bb030 Add vault for OpenPGP and PIV nightly-main Pol Henarejos 2026-08-26 01:51:53 +02:00
• 71384b3b47 OpenPGP terminate only terminates OpenPGP and preserves PIV Pol Henarejos 2026-08-26 01:47:08 +02:00
• 3f437db1c2 Add Pico Vault to OpenPGP and PIV Pol Henarejos 2026-08-25 14:31:17 +02:00
• 5945f39781 Do not allow key import if algorithm is not supported. Pol Henarejos 2026-08-21 00:24:05 +02:00
• 6c6187106f Make 7F74 DO as Constructed DO Pol Henarejos 2026-08-20 23:49:33 +02:00
• db21bf74e5 Pico Keys SDK 9 Pol Henarejos 2026-08-20 23:48:58 +02:00
• 7fe9ab39b6 Ensure PIV certificate serials are canonical Pol Henarejos 2026-08-15 01:36:07 +02:00
• 0ff8272720 Merge pull request #54 from polhenarejos/copilot/fix-code-scanning-alert-229 Pol HenarejosandGitHub 2026-08-15 00:26:03 +02:00
• c18ff0862f Fix CodeQL alert #229 loop counter type width 3 people 2026-08-14 22:22:53 +00:00
• 96443389f0 Initial plan copilot-swe-agent[bot]andGitHub 2026-08-14 22:21:04 +00:00
• 7b904aa609 Preserve PIV challenge-binding status for algorithm mismatch Pol Henarejos 2026-08-15 00:16:54 +02:00
• 2aa24637f3 Harden PIV key provenance updates Pol Henarejos 2026-08-15 00:01:50 +02:00
• 41704e54c1 Expire management challenges on unrelated commands Pol Henarejos 2026-08-14 23:51:54 +02:00
• 4b5de68912 Share spend-before-compare PIN verification Pol Henarejos 2026-08-14 23:47:48 +02:00
• 69edb21d71 Reject explicit default policy bytes Pol Henarejos 2026-08-14 23:38:37 +02:00
• d626852c13 Reject malformed VERIFY bodies without retry loss Pol Henarejos 2026-08-14 23:36:00 +02:00
• b686df8684 Require fixed-size reference change bodies Pol Henarejos 2026-08-14 23:34:32 +02:00
• d6362c6083 Fix error return code Pol Henarejos 2026-08-14 23:32:53 +02:00
• cbe4a93846 Report object deletion failures Pol Henarejos 2026-08-14 22:23:54 +02:00
• 8abf9d323e Default generated keys to no touch Pol Henarejos 2026-08-14 22:21:57 +02:00
• 0fb3a0d7d2 Make card-authentication keys pin-free by default Pol Henarejos 2026-08-14 22:19:50 +02:00
• ef19c3e208 Require exact EC scalar lengths on import Pol Henarejos 2026-08-14 22:18:23 +02:00
• b48ae519cf Accept RSA family algorithm aliases Pol Henarejos 2026-08-14 22:17:37 +02:00
• 144260a633 Add regression tests Pol Henarejos 2026-08-14 22:15:00 +02:00
• 81acc66d98 Report no PIN policy for management slot Pol Henarejos 2026-08-14 22:14:53 +02:00
• 8cc73cfd55 Bind pending authentication responses to issued algorithm Pol Henarejos 2026-08-14 22:08:02 +02:00
• 53241c74de Fix test error workflow report Pol Henarejos 2026-08-14 22:07:45 +02:00
• 0c9a414c3e Allow retired key moves and expose F9 metadata Pol Henarejos 2026-08-14 21:46:04 +02:00
• e2265401a9 Dispatch authentication by first operation tag Pol Henarejos 2026-08-14 21:42:47 +02:00
• 1b396be439 Report undefined references as not found Pol Henarejos 2026-08-14 21:34:55 +02:00
• e674ab1028 Normalize VERIFY framing and reset handling Pol Henarejos 2026-08-14 21:34:10 +02:00
• 24a87113fe Require complete object identifiers Pol Henarejos 2026-08-14 21:29:32 +02:00
• 1bb11e5f4a Move openpgp tests to tests/openpgp Pol Henarejos 2026-08-14 21:29:22 +02:00
• 27b57364c9 Include touch policy in default management-key flag Pol Henarejos 2026-08-14 20:39:15 +02:00
• 2ec36b3b23 Include algorithm tag in PIN metadata Pol Henarejos 2026-08-14 20:38:20 +02:00
• aee2435e9e Normalize framing and authorization order Pol Henarejos 2026-08-14 20:37:14 +02:00
• 83c886aad9 Move openpgp tests Pol Henarejos 2026-08-14 20:37:02 +02:00
• 351aa46e5d Add pytest tests for PIV Pol Henarejos 2026-08-14 20:28:48 +02:00
• 3469f61bb9 Fix APDU chained commands Pol Henarejos 2026-08-14 20:27:13 +02:00
• 39aad040ef Fix PIV get metadata for slot retired 18 Pol Henarejos 2026-08-14 20:26:59 +02:00
• 2aab5cf5cd Harden blocked PIN and terminate handling Pol Henarejos 2026-08-14 19:54:10 +02:00
• 241f5d82b2 Enforce forcesig for PSO signatures Pol Henarejos 2026-08-14 19:51:53 +02:00
• 999d7180b2 Validate algorithm attributes before key creation Pol Henarejos 2026-08-14 19:50:21 +02:00
• 14b39a8f9f Clamp PW status retry slices Pol Henarejos 2026-08-14 19:47:22 +02:00
• 881d670b54 Reject truncated data object responses Pol Henarejos 2026-08-14 19:45:23 +02:00
• 090335b939 Make PIN DEK updates power-loss recoverable Pol Henarejos 2026-08-14 19:35:12 +02:00
• 86cc28d131 Reject undefined security-status reset references Pol Henarejos 2026-08-14 19:14:36 +02:00
• e8d066284a Clear standing authentication after failure Pol Henarejos 2026-08-14 19:13:54 +02:00
• 81ee0735a4 Correct MSE template mapping Pol Henarejos 2026-08-14 19:10:58 +02:00
• 3ffd5efb40 Walk cardholder certificate occurrences Pol Henarejos 2026-08-14 19:05:14 +02:00
• dfae5e9098 Enforce fixed fingerprint and timestamp lengths Pol Henarejos 2026-08-14 18:59:06 +02:00
• aba80f964c Protect PW status limits from PUT DATA Pol Henarejos 2026-08-14 18:44:38 +02:00
• f82c97e604 Enforce GET CHALLENGE limits and parameters Pol Henarejos 2026-08-14 18:40:43 +02:00
• 8b219c8af4 Report VERIFY latches before retry counters Pol Henarejos 2026-08-14 18:28:08 +02:00
• 919f421384 Expect wrong P1P2 for invalid certificate occurrence Pol Henarejos 2026-08-14 18:26:01 +02:00
• 0829c5df11 Advertise the CCID APDU transport limit Pol Henarejos 2026-08-14 14:47:35 +02:00
• f1a4c16fd5 Reject invalid certificate occurrence as wrong P1P2 Pol Henarejos 2026-08-14 14:33:57 +02:00
• b1b956b18f Reject impossible PIN lengths without retry Pol Henarejos 2026-08-14 14:32:45 +02:00
• 6cb6198609 Enforce RSA size in imported algorithm attributes Pol Henarejos 2026-08-14 14:29:54 +02:00
• 35c4f19478 Return wrong data for invalid reset-code length Pol Henarejos 2026-08-14 14:26:42 +02:00
• de54acefb2 Recover interrupted first-boot DEK provisioning Pol Henarejos 2026-08-14 14:25:50 +02:00
• f17dbee07a Enforce cardholder DO limits Pol Henarejos 2026-08-14 14:23:23 +02:00
• 72fb766ad4 Reject out-of-range new PINs with SW_CONDITIONS_NOT_SATISFIED Pol Henarejos 2026-08-14 14:22:10 +02:00
• 6e2e3ca269 Authenticate before IMPORT slot parsing Pol Henarejos 2026-08-14 14:15:50 +02:00
• 5be7c83e5d Preserve host-installed AES key during keygen Pol Henarejos 2026-08-14 14:04:54 +02:00
• b03a350330 Hide internal files from GET DATA and SELECT. Pol Henarejos 2026-08-14 14:01:20 +02:00
• 3293de8f31 Authenticate before PUT DATA validation Pol Henarejos 2026-08-14 13:56:57 +02:00
• d5244fc93e Keep private DOs under PW2 authorization Pol Henarejos 2026-08-14 13:56:49 +02:00
• e905959db6 Fix FS record publication ordering. Pol Henarejos 2026-08-14 13:45:43 +02:00
• 1472b26574 Fix test build. Pol Henarejos 2026-07-27 12:16:15 +02:00
• 33056e616e Migrate Pico OpenPGP to byte-array SDK APIs Pol Henarejos 2026-07-27 11:58:47 +02:00
• 40018bca23 Fix self-signed certificates. Pol Henarejos 2026-07-27 11:44:59 +02:00
• 2f9bacc611 Fix authentication flow. Pol Henarejos 2026-07-27 01:40:58 +02:00
• c4c27ddd20 Fix PIN legacy migration. Pol Henarejos 2026-07-27 01:20:25 +02:00
• 96a4acf84e Add container-backed storage for OpenPGP and PIV keys Pol Henarejos 2026-07-27 00:50:26 +02:00
• 695cb90a78 Upgrade workflow versions. Pol Henarejos 2026-07-27 00:41:50 +02:00
• 23038e2499 Add libtpm to autobuild. Pol Henarejos 2026-07-13 00:44:26 +02:00
• e456fec17e Add blink 3 times on PSO and internal authentication. Pol Henarejos 2026-07-13 00:33:54 +02:00
• f25cc97276 Add sanity check bounds. Pol Henarejos 2026-07-12 22:49:40 +02:00
• ba5573195b PIV MOVE KEY rejects P1 == P2 before modifying source data. PIV SET PIN RETRIES now requires both management-key and current-PIN authentication. PIV GENERAL AUTHENTICATE rejects metadata records shorter than the 3-byte policy header. Pol Henarejos 2026-07-12 22:48:27 +02:00
• 34ec50c124 VERIFY P2=82 now uses PW1’s shared retry counter and never probes EF_RC. Pol Henarejos 2026-07-12 22:48:13 +02:00
• ed942d5614 PW1.81/PW1.82/PW3 authentication latches are now independent. Pol Henarejos 2026-07-12 22:48:00 +02:00
• 6e7bb818ae C4 rejects payloads longer than four bytes, preventing retry-counter corruption. Pol Henarejos 2026-07-12 22:47:06 +02:00
• a83561c597 RC ships deactivated to avoid an attacker to reset the user PIN (PW1) and do operations. Pol Henarejos 2026-07-10 16:55:22 +02:00
• 64a0666e02 Add tests for short fingerprint zero-padded data. Pol Henarejos 2026-07-10 16:51:14 +02:00
• a22f36e03d Add support for admin-less mode. Pol Henarejos 2026-07-10 16:37:24 +02:00
• 950b4fc5ec Move tests to bookworm Pol Henarejos 2026-07-09 18:22:39 +02:00
• f1091c2fad Add libtss Pol Henarejos 2026-07-09 18:10:53 +02:00
• 4071217b56 Move Pico Keys SDK pointer. Pol Henarejos 2026-07-09 17:27:32 +02:00
• 64b1560a59 Add OpenPGP and PIV regression coverage Pol Henarejos 2026-07-09 17:21:44 +02:00
• def00b5dc8 fix(piv): bind management authentication flows Pol Henarejos 2026-07-09 17:21:26 +02:00
• d157ea9072 fix(openpgp): harden stored data and key handling Pol Henarejos 2026-07-09 17:21:13 +02:00
• 951badbf51 Use new TLV format. Pol Henarejos 2026-06-21 20:40:26 +02:00
• e63b26f91a Fix verification constantness. Pol Henarejos 2026-06-21 20:26:07 +02:00