Implement commands

[sosthene-nitrokey]

PIV standard

• [x] SELECT
• [x] GET DATA - #5
  • [x] Mandatory Data elements:
  • [x] Card Capability Container
  • [x] Card Holder Unique Identifier
    • [x] asymmetric Signature Field
  • [x] X.509 Certificate for PIV Authentication
  • [x] X.509 Certificate for Card Authentication
  • [x] Cardholder Fingerprints
  • [x] Cardholder Facial Image (only up to 1KB)
  • [x] Security Object
  • [ ] Conditional Data elements:
  • [x] X.509 Certificate for Digital Signature
  • [ ] X.509 Certificate for Key Management
  • [ ] Optional Data Elements
  • [x] Printed Information (Not applicable)
  • [x] Discovery Object
  • [x] Key History Object
  • [x] Retired X.509 Certificates for Key Management
  • [x] Cardholder Iris Images
  • [x] Biometric Information Templates Group Template
  • [x] Secure Messaging Certificate Signer
  • [x] Pairing Code Reference Data Container UUIDs:
  • [ ] Card UUID
• [x] VERIFY
  • [x] Global Pin
  • [x] PivPin
  • [ ] Primary finger OCC (Optional)
  • [ ] Secondary finger OCC (Optional)
  • [ ] Pairing Code (for NFC only)
• [x] CHANGE REFERENCE DATA
  • [x] PivPIn
  • [x] Puk
• [x] RESET RETRY COUNTER
• [x] GENERAL AUTHENTICATE
  • [x] Witness
  • [x] Challenge - #3
  • [x] Response - #3
  • [x] Exponentiation
• [x] PUT DATA - #5
• [x] GENERATE ASYMMETRIC KEYPAIR

Yubico extensions

• [x] Set management key
• [ ] Import asymmetric key https://github.com/Nitrokey/piv-authenticator/issues/41
• [x] Get Version (Not applicable?)
• [x] Reset
• [ ] Set Pin Retries
• [ ] Attest (Not applicable?)
• [ ] Get Serial (Not applicable?)
• [ ] Get Metadata

[stv0g]

New YubiKey extensions as part of their 5.7 firmware update should be probably added to this list:

• [ ] Move keys between slots
• [ ] Delete keys from slots
• [ ] AES management keys
• [ ] New algorithms
  • [ ] RSA 3072
  • [ ] RSA 4096
  • [ ] X25519
  • [ ] Ed25519

See: https://docs.yubico.com/hardware/yubikey/yk-tech-manual/5.7-firmware-specifics.html#piv-enhancements