diff options
| author | Werner Koch <[email protected]> | 2022-10-24 15:40:20 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2022-10-28 10:13:29 +0000 |
| commit | 7ed523ca13326c25c7d740be161e3c7b53193bff (patch) | |
| tree | a1abd01582a3d59e079b436969c15730b9979d2e | |
| parent | scd: Use app_get_slot at more places. (diff) | |
| download | gnupg-7ed523ca13326c25c7d740be161e3c7b53193bff.tar.gz gnupg-7ed523ca13326c25c7d740be161e3c7b53193bff.zip | |
scd:nks: Support non-ESIGN signing with the Signature Card v2
* scd/app-nks.c (do_sign): Handle ECC for NKS cards
--
Backported-from-master: 959c627892121ce9707bfa36f2510216b4f6f247
GnuPG-bug-id: 6252
| -rw-r--r-- | scd/app-nks.c | 28 |
1 files changed, 20 insertions, 8 deletions
diff --git a/scd/app-nks.c b/scd/app-nks.c index c14041506..348a6203c 100644 --- a/scd/app-nks.c +++ b/scd/app-nks.c @@ -1902,19 +1902,31 @@ do_sign (app_t app, ctrl_t ctrl, const char *keyidstr, int hashalgo, return gpg_error (GPG_ERR_INV_VALUE); #undef X - /* Send an MSE for PSO:Computer_Signature. */ + /* Send an MSE for PSO:Compute_Signature. */ if (app->appversion > 2 && app->app_local->active_nks_app != NKS_APP_ESIGN) { unsigned char mse[6]; + unsigned int mselen; - mse[0] = 0x80; /* Algorithm reference. */ - mse[1] = 1; - mse[2] = 2; /* RSA, card does pkcs#1 v1.5 padding, no ASN.1 check. */ - mse[3] = 0x84; /* Private key reference. */ - mse[4] = 1; - mse[5] = kid; + if (algo == GCRY_PK_ECC) + { + mse[0] = 0x84; /* Private key reference. */ + mse[1] = 1; + mse[2] = kid; + mselen = 3; + } + else /* RSA */ + { + mse[0] = 0x80; /* Algorithm reference. */ + mse[1] = 1; + mse[2] = 2; /* Card does pkcs#1 v1.5 padding, no ASN.1 check. */ + mse[3] = 0x84; /* Private key reference. */ + mse[4] = 1; + mse[5] = kid; + mselen = 6; + } err = iso7816_manage_security_env (app_get_slot (app), 0x41, 0xB6, - mse, sizeof mse); + mse, mselen); } if (app->app_local->active_nks_app == NKS_APP_ESIGN) |