Commit Graph
6763 Commits
Author SHA1 Message Date
Dominik SchürmannandGitHub 8154b46326 Merge pull request #2227 from open-keychain/usb-whitelist
Use different approach for whitelisting usb security tokens
2017-11-28 15:13:16 +01:00
Vincent Breitmoser 028a7c7a3a add handling for UnsupportedUsbToken exception 2017-11-28 15:10:04 +01:00
Vincent Breitmoser 9487806c08 respect experimental setting for untested usb devices 2017-11-28 15:10:04 +01:00
Vincent Breitmoser 0d099116d5 add experimental setting to allow untested usb devices 2017-11-28 15:08:13 +01:00
Vincent Breitmoser 71d2d66ee2 Use different approach for whitelisting usb security tokens 2017-11-28 15:08:12 +01:00
Christian Hagau 8afc43d192 Add tests for SshSignatureConverter 2017-11-28 03:58:14 +00:00
Christian Hagau de695fa2b0 Improve error handling for curve OID to SSH curve identifier translation 2017-11-28 03:58:14 +00:00
Christian Hagau d4c9f69696 Update sshauthentication-api javadoc with regard to signature encoding 2017-11-28 03:58:14 +00:00
Christian Hagau 6e5f5405a2 Return encoded signature blob instead of a raw signature in
SshAuthenticationService
2017-11-28 03:58:07 +00:00
Dominik Schürmann 2c0e7be7a1 Update license link 2017-11-27 14:25:06 +01:00
Dominik Schürmann 4972a10fd6 Release sshauthentication-api to bintray 2017-11-27 14:22:28 +01:00
Dominik SchürmannandGitHub 0a72dda6fc Merge pull request #2222 from hagau/cleanup_ssh_api_lib
Cosmetic improvements to SshAuthenticationApi
2017-11-27 13:26:36 +01:00
Dominik SchürmannandGitHub 560834410b Merge pull request #2221 from hagau/ssh_api_lib_doc
Improve sshauthentication-api documentation
2017-11-27 13:25:50 +01:00
Vincent BreitmoserandGitHub fa82a9eb42 Merge pull request #2217 from hagau/cleanup_auth_sig_gen
Fix EdDSA signature generation for authentication & clean up authentication signature generator
2017-11-25 15:32:05 +01:00
Christian Hagau 8d3b5c196d Fix and clean up SshPublicKeyTest 2017-11-23 12:13:18 +00:00
Christian Hagau 028d869168 Add tests for RSA, EdDSA & DSA keys in AuthenticationOperation 2017-11-23 12:13:18 +00:00
Christian Hagau 2dba6e3cb0 Return the raw signature instead of a PGPSignature in
AuthenticationSignatureGenerator
2017-11-23 12:12:50 +00:00
Christian Hagau f70b10d548 Use a custom EdDsaAuthenticationContentSignerBuilder for signing with
EdDSA, since EdDSA expects the raw data instead of a hash
2017-11-22 18:03:04 +00:00
Christian Hagau 2e3649100c Rename PGPAuthenticationSignatureGenerator to
AuthenticationSignatureGenerator & reformat
2017-11-22 18:03:04 +00:00
Christian Hagau 48b8f97b78 Remove unused PGP signature artefacts from PGPAuthenticationSignatureGenerator 2017-11-22 18:03:04 +00:00
Vincent Breitmoser 1f7c7f49d4 remove check for unsupported usb devices 2017-11-22 16:19:26 +01:00
Vincent Breitmoser 8c2c131be6 refresh connection capabilities after token reset 2017-11-22 15:11:54 +01:00
Vincent Breitmoser 21d533902e handle unavailable pins better for SecurityTokenConnection 2017-11-22 14:57:36 +01:00
Vincent Breitmoser bf173b1e65 use deterministic passphrase in PgpKeyOperationTest 2017-11-22 14:19:38 +01:00
Vincent BreitmoserandGitHub 833ff57e51 Merge pull request #2214 from hagau/auth_provider_utils
Add/modify helper for getting authentication provider information
2017-11-22 13:14:59 +01:00
Christian Hagau 0ca314e7f9 Cosmetic improvements to SshAuthenticationApi 2017-11-22 00:00:00 +00:00
Christian Hagau 15a614fc59 - Add a README.md to sshauthentication-api
- Add a note regarding the use of the hash algorithm parameter for EdDSA
  signatures
2017-11-22 00:00:00 +00:00
Vincent Breitmoser 57609636a6 add note about where usb whitelisting happens 2017-11-19 17:01:29 +01:00
Christian Hagau 338925b21b Add/modify helper for getting authentication provider information 2017-11-17 15:21:15 +00:00
Dominik SchürmannandGitHub 5474065d27 Merge pull request #2218 from hagau/fix_error_handling_algo
Fix error handling in case of an unsupported algorithm parameter in
2017-11-17 13:58:13 +01:00
Dominik Schürmann 7a943c65d3 Update bitcoin address 2017-11-16 11:42:07 +01:00
Christian Hagau 12fdb111c9 Fix error handling in case of an unsupported algorithm parameter in
SshAuthenticationService
2017-11-12 15:01:51 +00:00
Dominik SchürmannandGitHub a9e7682985 Merge pull request #2211 from open-keychain/gnuk-version
Nitrokey Start/Storage Support
2017-11-08 15:01:49 +01:00
Dominik Schürmann 9c1915423a Support Nitrokey Start and Storage 2017-11-06 14:11:32 +01:00
Dominik SchürmannandGitHub e8be6bdb69 Merge pull request #2206 from open-keychain/gnuk-version
More Gnuk improvements
2017-11-06 13:02:07 +01:00
Dominik Schürmann 106dbdf4a9 Simplify SecurityTokenInfo.Version using AutoValue 2017-11-05 23:13:18 +01:00
Dominik Schürmann 221eb194d9 Merge SUPPORTED_PUT_KEY and SUPPORTED_RESET 2017-11-05 22:59:11 +01:00
Dominik Schürmann da186ca49f Reset PW3 validation directly in modifyPw3Pin 2017-11-05 19:10:59 +01:00
Dominik Schürmann 2cf3e27e51 First set Admin PIN, then PIN to prevent Gnuk from going into 'admin less mode' 2017-11-03 14:06:26 +01:00
Vincent BreitmoserandDominik Schürmann 3a818e8cde improve security token connection unit tests 2017-11-02 19:25:08 +01:00
Dominik Schürmann b56a420aed Enable Gnuk 1.2.5 for put key 2017-11-02 19:21:37 +01:00
Dominik Schürmann 8acf62a0e8 Use check for life cycle management to determine if token supports reset 2017-11-02 19:13:44 +01:00
Dominik Schürmann 90310b7036 Read life cycle management from historical bytes 2017-11-02 18:54:41 +01:00
Dominik Schürmann bfce1cb4a9 Fix GNUK version comparison. 1.2.5 already supports reset, use class to make 1.2.10 bigger as 1.2.9 2017-11-02 14:19:38 +01:00
Dominik SchürmannandGitHub 3ff5470d10 Merge pull request #2172 from hagau/dev
WIP: SSH Authentication API
2017-11-01 15:36:51 +01:00
Christian Hagau 2619cb1db3 Add sshauthentication-api v1 support 2017-11-01 14:28:17 +00:00
Dominik SchürmannandGitHub 83ab483fc7 Merge pull request #2201 from open-keychain/gnuk-new
Gnuk
2017-11-01 14:45:29 +01:00
Vincent Breitmoser a42391f7e9 add Nitrokey Pro to whitelist for reset and key import after testing 2017-10-31 16:07:07 +01:00
Vincent Breitmoser aef66e97ea Disable reset for Gnuk token version < 1.2.5 2017-10-31 15:40:14 +01:00
Vincent Breitmoser a51d0555e1 Retain RSA public exponent length when setting key attributes in putKey operation
Similar to the previous commit, openpgp applet implementations differ in
regards to the public exponent length. As of this writing:
- The SmartPGP applet requires an 11 bit public exponent size
- The Gnuk token requires a 32 bit public exponent size

For this reason, we simply set the public exponent size to the one
previously set in the key attribute info. With this commit, the only
variable that can actually change for an RSA key is its modulus size.
2017-10-30 22:57:13 +01:00