Vincent Breitmoser
3bfb04f990
show more generic "Enter password" if asking for multiple
2017-11-28 16:18:46 +01:00
Vincent Breitmoser
04efa9e66d
check all requested keys in PassphraseDialogActivity
2017-11-28 16:18:46 +01:00
Vincent Breitmoser
66f713c847
add simple unit test for more than decryption one key candidate
2017-11-28 16:15:11 +01:00
Vincent Breitmoser
5e416d6ae5
collect all potential keys before asking for passphrase
2017-11-28 16:15:11 +01:00
Dominik Schürmann
8154b46326
Merge pull request #2227 from open-keychain/usb-whitelist
...
Use different approach for whitelisting usb security tokens
2017-11-28 15:13:16 +01:00
Vincent Breitmoser
028a7c7a3a
add handling for UnsupportedUsbToken exception
2017-11-28 15:10:04 +01:00
Vincent Breitmoser
9487806c08
respect experimental setting for untested usb devices
2017-11-28 15:10:04 +01:00
Vincent Breitmoser
0d099116d5
add experimental setting to allow untested usb devices
2017-11-28 15:08:13 +01:00
Vincent Breitmoser
71d2d66ee2
Use different approach for whitelisting usb security tokens
2017-11-28 15:08:12 +01:00
Dominik Schürmann
2c0e7be7a1
Update license link
2017-11-27 14:25:06 +01:00
Dominik Schürmann
4972a10fd6
Release sshauthentication-api to bintray
2017-11-27 14:22:28 +01:00
Dominik Schürmann
0a72dda6fc
Merge pull request #2222 from hagau/cleanup_ssh_api_lib
...
Cosmetic improvements to SshAuthenticationApi
2017-11-27 13:26:36 +01:00
Dominik Schürmann
560834410b
Merge pull request #2221 from hagau/ssh_api_lib_doc
...
Improve sshauthentication-api documentation
2017-11-27 13:25:50 +01:00
Vincent Breitmoser
fa82a9eb42
Merge pull request #2217 from hagau/cleanup_auth_sig_gen
...
Fix EdDSA signature generation for authentication & clean up authentication signature generator
2017-11-25 15:32:05 +01:00
Christian Hagau
8d3b5c196d
Fix and clean up SshPublicKeyTest
2017-11-23 12:13:18 +00:00
Christian Hagau
028d869168
Add tests for RSA, EdDSA & DSA keys in AuthenticationOperation
2017-11-23 12:13:18 +00:00
Christian Hagau
2dba6e3cb0
Return the raw signature instead of a PGPSignature in
...
AuthenticationSignatureGenerator
2017-11-23 12:12:50 +00:00
Christian Hagau
f70b10d548
Use a custom EdDsaAuthenticationContentSignerBuilder for signing with
...
EdDSA, since EdDSA expects the raw data instead of a hash
2017-11-22 18:03:04 +00:00
Christian Hagau
2e3649100c
Rename PGPAuthenticationSignatureGenerator to
...
AuthenticationSignatureGenerator & reformat
2017-11-22 18:03:04 +00:00
Christian Hagau
48b8f97b78
Remove unused PGP signature artefacts from PGPAuthenticationSignatureGenerator
2017-11-22 18:03:04 +00:00
Vincent Breitmoser
1f7c7f49d4
remove check for unsupported usb devices
2017-11-22 16:19:26 +01:00
Vincent Breitmoser
8c2c131be6
refresh connection capabilities after token reset
2017-11-22 15:11:54 +01:00
Vincent Breitmoser
21d533902e
handle unavailable pins better for SecurityTokenConnection
2017-11-22 14:57:36 +01:00
Vincent Breitmoser
bf173b1e65
use deterministic passphrase in PgpKeyOperationTest
2017-11-22 14:19:38 +01:00
Vincent Breitmoser
833ff57e51
Merge pull request #2214 from hagau/auth_provider_utils
...
Add/modify helper for getting authentication provider information
2017-11-22 13:14:59 +01:00
Christian Hagau
0ca314e7f9
Cosmetic improvements to SshAuthenticationApi
2017-11-22 00:00:00 +00:00
Christian Hagau
15a614fc59
- Add a README.md to sshauthentication-api
...
- Add a note regarding the use of the hash algorithm parameter for EdDSA
signatures
2017-11-22 00:00:00 +00:00
Vincent Breitmoser
57609636a6
add note about where usb whitelisting happens
2017-11-19 17:01:29 +01:00
Christian Hagau
338925b21b
Add/modify helper for getting authentication provider information
2017-11-17 15:21:15 +00:00
Dominik Schürmann
5474065d27
Merge pull request #2218 from hagau/fix_error_handling_algo
...
Fix error handling in case of an unsupported algorithm parameter in
2017-11-17 13:58:13 +01:00
Dominik Schürmann
7a943c65d3
Update bitcoin address
2017-11-16 11:42:07 +01:00
Christian Hagau
12fdb111c9
Fix error handling in case of an unsupported algorithm parameter in
...
SshAuthenticationService
2017-11-12 15:01:51 +00:00
Dominik Schürmann
a9e7682985
Merge pull request #2211 from open-keychain/gnuk-version
...
Nitrokey Start/Storage Support
2017-11-08 15:01:49 +01:00
Dominik Schürmann
9c1915423a
Support Nitrokey Start and Storage
2017-11-06 14:11:32 +01:00
Dominik Schürmann
e8be6bdb69
Merge pull request #2206 from open-keychain/gnuk-version
...
More Gnuk improvements
2017-11-06 13:02:07 +01:00
Dominik Schürmann
106dbdf4a9
Simplify SecurityTokenInfo.Version using AutoValue
2017-11-05 23:13:18 +01:00
Dominik Schürmann
221eb194d9
Merge SUPPORTED_PUT_KEY and SUPPORTED_RESET
2017-11-05 22:59:11 +01:00
Dominik Schürmann
da186ca49f
Reset PW3 validation directly in modifyPw3Pin
2017-11-05 19:10:59 +01:00
Dominik Schürmann
2cf3e27e51
First set Admin PIN, then PIN to prevent Gnuk from going into 'admin less mode'
2017-11-03 14:06:26 +01:00
Vincent Breitmoser
3a818e8cde
improve security token connection unit tests
2017-11-02 19:25:08 +01:00
Dominik Schürmann
b56a420aed
Enable Gnuk 1.2.5 for put key
2017-11-02 19:21:37 +01:00
Dominik Schürmann
8acf62a0e8
Use check for life cycle management to determine if token supports reset
2017-11-02 19:13:44 +01:00
Dominik Schürmann
90310b7036
Read life cycle management from historical bytes
2017-11-02 18:54:41 +01:00
Dominik Schürmann
bfce1cb4a9
Fix GNUK version comparison. 1.2.5 already supports reset, use class to make 1.2.10 bigger as 1.2.9
2017-11-02 14:19:38 +01:00
Dominik Schürmann
3ff5470d10
Merge pull request #2172 from hagau/dev
...
WIP: SSH Authentication API
2017-11-01 15:36:51 +01:00
Christian Hagau
2619cb1db3
Add sshauthentication-api v1 support
2017-11-01 14:28:17 +00:00
Dominik Schürmann
83ab483fc7
Merge pull request #2201 from open-keychain/gnuk-new
...
Gnuk
2017-11-01 14:45:29 +01:00
Vincent Breitmoser
a42391f7e9
add Nitrokey Pro to whitelist for reset and key import after testing
2017-10-31 16:07:07 +01:00
Vincent Breitmoser
aef66e97ea
Disable reset for Gnuk token version < 1.2.5
2017-10-31 15:40:14 +01:00
Vincent Breitmoser
a51d0555e1
Retain RSA public exponent length when setting key attributes in putKey operation
...
Similar to the previous commit, openpgp applet implementations differ in
regards to the public exponent length. As of this writing:
- The SmartPGP applet requires an 11 bit public exponent size
- The Gnuk token requires a 32 bit public exponent size
For this reason, we simply set the public exponent size to the one
previously set in the key attribute info. With this commit, the only
variable that can actually change for an RSA key is its modulus size.
2017-10-30 22:57:13 +01:00
