Manage security environment

sosthene-nitrokey commented 1 year ago

This PR adds support for the MANAGE SECURITY ENVIRONMENT command.

[ ] This PR allows using the DEC key for INTERNAL AUTHENTICATE and vice versa. Should we drop the distinction between AuthenticationAlgorithm and DecryptionAlgorithm enums ? This would simplify the code and be more flexible, but would allow generation/import of keys that aren't usable.
[x] There are currently no tests, as neither GnuPG nor the openpgp-card crate expose the functionality. I think the easiest way to test it would be to add the functionality to openpgp-card. See openpgp-card#8

sosthene-nitrokey commented 1 year ago

I don't understand why the CI fails. It runs on my machine

sosthene-nitrokey commented 1 year ago

Ok, it's because of openpgp-card-pcsc which was updated and broke semver. https://gitlab.com/openpgp-card/openpgp-card/-/issues/41

sosthene-nitrokey commented 1 year ago

Upgrading to v0.3 could solve the issue. But v0.3 adds Sync bounds which are pretty restrictive. I've made PRs to make it possible to implement it on our end:

https://github.com/trussed-dev/interchange/pull/7 https://github.com/trussed-dev/trussed/pull/50

Nitrokey / opcard-rs

Manage security environment #60