A card driver may declare support for computing the padding on the card, or else the padding will be applied locally in padding.c. All five PKCS11 PSS mechanisms are supported, for signature and verification. There are a few limits on what we choose to support, in particular I don't see a need for arbitrary combinations of MGF hash, data hash, and salt length, so I've restricted it (for the user's benefit) to the only cases that really matter, where salt_len = hash_len and the same hash is used for the MGF and data hashing. ------------------------------------------------------------------------ Reworked and extended in 2018 by Jakub Jelen <jjelen@redhat.com> against current OpenSC master, to actually work with existing PIV cards: * extended of missing mechanisms (SHA224, possibility to select MGF1) * compatibility with OpenSSL 1.1+ * Removed the ANSI padding * Formatting cleanup, error checking Based on the original work from https://github.com/NWilson/OpenSC/commit/42f3199e66 Signed-off-by: Jakub Jelen <jjelen@redhat.com> |
||
---|---|---|
.github | ||
MacOSX | ||
doc | ||
etc | ||
m4 | ||
packaging/debian.templates | ||
src | ||
win32 | ||
.gitignore | ||
.travis.yml | ||
COPYING | ||
Makefile.am | ||
Makefile.mak | ||
NEWS | ||
README | ||
README.md | ||
appveyor.yml | ||
bootstrap | ||
bootstrap.ci | ||
configure.ac | ||
version.m4 |
README.md
OpenSC documentation
Wiki is available online
Please take a look at the documentation before trying to use OpenSC.
Build and test status of specific cards:
Cards | Status |
---|---|
CAC | |
Coolkey |