diff options
| author | NIIBE Yutaka <[email protected]> | 2026-09-16 03:58:59 +0200 |
|---|---|---|
| committer | NIIBE Yutaka <[email protected]> | 2026-09-16 03:58:59 +0200 |
| commit | e6d92ff7afaf0a46d8e17b96b7b22ea40b938eb9 (patch) | |
| tree | 095f2c5a89ff3b0b4d77fc76dd3ba956e1339625 /scd | |
| parent | scd:p15: Fix use of log_info. (diff) | |
| download | gnupg-e6d92ff7afaf0a46d8e17b96b7b22ea40b938eb9.tar.gz gnupg-e6d92ff7afaf0a46d8e17b96b7b22ea40b938eb9.zip | |
scd:piv: Update comment.
--
GnuPG-bug-id: 8442
Signed-off-by: NIIBE Yutaka <[email protected]>
Diffstat (limited to 'scd')
| -rw-r--r-- | scd/app-piv.c | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/scd/app-piv.c b/scd/app-piv.c index 660430dbb..25d5988f6 100644 --- a/scd/app-piv.c +++ b/scd/app-piv.c @@ -18,7 +18,7 @@ */ /* Some notes: - * - Specs for PIV are at http://dx.doi.org/10.6028/NIST.SP.800-73-4 + * - Specs for PIV are at https://doi.org/10.6028/NIST.SP.800-73pt1-5 * - https://developers.yubico.com/PIV/Introduction/PIV_attestation.html * * - Access control matrix: @@ -310,7 +310,7 @@ get_cached_data (app_t app, int tag, /* Unless the Discovery Object or the BIT Group Template is * requested, remove the outer container. - * (SP800-73.4 Part 2, section 3.1.2) */ + * (SP 800-73-5 Part 2, section 3.1.2) */ if (tag == 0x7E || tag == 0x7F61) ; else if (len && *p == 0x53 && (s = find_tlv (p, len, 0x53, &n))) @@ -2206,8 +2206,12 @@ do_sign (app_t app, ctrl_t ctrl, const char *keyidstr, int hashalgo, goto leave; } - /* According to table 4b of SP800-73-4 the signing key always - * requires a verify. */ + /* According to table 5 of SP 800-73-5 Part 1 the signing key always + * requires a verify. */ + /* On the other hand, Yubikey has an extensions of PIN/touch policy + * for each key. It's user's control. + * https://developers.yubico.com/PIV/Introduction/Yubico_extensions.html + */ switch (keyref) { case 0x9c: force_verify = 1; break; |