diff options
| author | NIIBE Yutaka <[email protected]> | 2020-09-16 03:49:20 +0000 |
|---|---|---|
| committer | NIIBE Yutaka <[email protected]> | 2020-09-16 03:49:20 +0000 |
| commit | 8dfd0ebfd8cf2b6bcecbd91c8f7fad6db583aa5a (patch) | |
| tree | 480f0e824b0a90fa1219853846aaf4eee16a39e9 /scd/app-openpgp.c | |
| parent | scd: Fix the use case of verify_chv2 by CHECKPIN. (diff) | |
| download | gnupg-8dfd0ebfd8cf2b6bcecbd91c8f7fad6db583aa5a.tar.gz gnupg-8dfd0ebfd8cf2b6bcecbd91c8f7fad6db583aa5a.zip | |
gpg,scd: Fix handling of KDF feature.
* g10/card-util.c (kdf_setup): Fix the default value.
* scd/app-openpgp.c (do_setattr): Support kdf-setup "off" by
Zeitcontrol. Make sure Gnuk and Yubikey work well.
Signed-off-by: NIIBE Yutaka <[email protected]>
Diffstat (limited to 'scd/app-openpgp.c')
| -rw-r--r-- | scd/app-openpgp.c | 34 |
1 files changed, 23 insertions, 11 deletions
diff --git a/scd/app-openpgp.c b/scd/app-openpgp.c index 3c692760a..3f49b3385 100644 --- a/scd/app-openpgp.c +++ b/scd/app-openpgp.c @@ -2918,22 +2918,36 @@ do_setattr (app_t app, ctrl_t ctrl, const char *name, if (table[idx].special == 4) { - if (valuelen == KDF_DATA_LENGTH_MIN) + if (app->card->cardtype == CARDTYPE_YUBIKEY + || app->card->cardtype == CARDTYPE_GNUK) { - /* Single user KDF of Gnuk */ rc = verify_chv3 (app, ctrl, pincb, pincb_arg); if (rc) return rc; } - else if (valuelen == KDF_DATA_LENGTH_MAX) + else { char *oldpinvalue = NULL; char *buffer1 = NULL; size_t bufferlen1; const char *u, *a; + size_t ulen, alen; - u = (const char *)value + 44; - a = u + 34; + if (valuelen == 3) + { + u = "123456"; + a = "12345678"; + ulen = 6; + alen = 8; + } + else if (valuelen == KDF_DATA_LENGTH_MAX) + { + u = (const char *)value + 44; + a = u + 34; + ulen = alen = 32; + } + else + return gpg_error (GPG_ERR_INV_OBJ); if (!pin_from_cache (app, ctrl, 3, &oldpinvalue)) { @@ -2957,14 +2971,14 @@ do_setattr (app_t app, ctrl_t ctrl, const char *name, rc = iso7816_change_reference_data (app_get_slot (app), 0x83, buffer1, bufferlen1, - a, 32); + a, alen); if (!rc) - rc = iso7816_verify (app_get_slot (app), 0x83, a, 32); + rc = iso7816_verify (app_get_slot (app), 0x83, a, alen); if (!rc) cache_pin (app, ctrl, 3, "12345678"); if (!rc) - rc = iso7816_reset_retry_counter (app_get_slot (app), 0x81, u, 32); + rc = iso7816_reset_retry_counter (app_get_slot (app), 0x81, u, ulen); if (!rc) cache_pin (app, ctrl, 1, "123456"); @@ -2974,11 +2988,9 @@ do_setattr (app_t app, ctrl_t ctrl, const char *name, wipe_and_free (buffer1, bufferlen1); wipe_and_free_string (oldpinvalue); } - else - return gpg_error (GPG_ERR_INV_OBJ); /* Flush the cache again, because pin2hash_if_kdf uses the DO. */ - flush_cache_item (app, 0xF9); + flush_cache_item (app, 0x00F9); } rc = iso7816_put_data (app_get_slot (app), |