giomba
/
opensc
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fixed gen_key to expect the proper PIV Key references. 

0x9B is defined as the Card Management Key, and probably shouldn't be
regenerated.  0x9E is the Card Authentication key which is what you
should be generating keys for.  This also brings piv-tool in line with
the documentation that states 0x9A, 0x9C, 0x9D and 0x9E are the proper
keyIds to use.
This commit is contained in:
Charles Bancroft 2013-05-10 09:14:20 -04:00
parent 112092f7dd
commit 62dbdfff3a
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/tools/piv-tool.c
View File

@ -86,7 +86,7 @@ static const char *option_help[] = {
"authenticate using default 3des key",
"Generate key <ref>:<alg> 9A:06 on card, and output pubkey",
"Load an object <containerID> containerID as defined in 800-73 without leading 0x",
"Load a cert <ref> where <ref> is 9A,9B,9C or 9D",
"Load a cert <ref> where <ref> is 9A,9C,9D or 9E",
"Load a cert that has been gziped <ref>",
"Output file for cert or key",
"Inout file for cert",
@ -268,13 +268,13 @@ static int gen_key(const char * key_info)
}
switch (buf[0]) {
case 0x9a:
case 0x9b:
case 0x9c:
case 0x9d:
case 0x9e:
keydata.key_num = buf[0];
break;
default:
fprintf(stderr, "<keyref>:<algid> must be 9A, 9B, 9C or 9D\n");
fprintf(stderr, "<keyref>:<algid> must be 9A, 9C, 9D or 9E\n");
return 2;
}