Yubico / Yubico.NET.SDK

A YubiKey SDK for .NET developers
Apache License 2.0
96 stars 48 forks source link

AES keys support for PIV management #10

Closed dawidkowal closed 2 years ago

dawidkowal commented 2 years ago

Hi,

Are you planning to implement AES support in the management key?

Command APDU (First Call, Second Call) "If the value in P2 is 9B (the slot for the management key), the YubiKey will accept either 00 or 03 in P1. (03 for Triple-DES)" PivAlgorithm for AES-256 is 12 but for command P1 = 12 I got an error.

GregDomzalski commented 2 years ago

Sorry for the delay in response.

Yes, this is on our roadmap. We should be able to get this on the 1.4 release train.

dawidkowal commented 2 years ago

Great, thanks.

Is documentation for low-level commands available?

In addition to what is described in the Yubico Desktop SDK documentation

GregDomzalski commented 2 years ago

Not yet. I'll see about putting something together for you in the meantime.

GregDomzalski commented 2 years ago

Hi @dawidkowal - we just released SDK 1.4.0 today. This includes support for AES management keys in PIV. Please take a look and try it out!

Since this resolves your feature request, I am closing this issue. Please feel free to open a new issue if you run into further difficulties.