Support Ed25519 and X25519 - Githubissues

Yubico / yubikit-android

Yubico Mobile Android SDK - YubiKit

Apache License 2.0

114 stars 42 forks source link

Support Ed25519 and X25519 #133

Closed AdamVe closed 6 months ago

AdamVe commented 6 months ago

Generate/import Ed25519 and X25519 keys directly through PivSession or with the use of our YKPiv JCA Provider.
Digital signature with Ed25519 through YKPiv JCA Provider.
Key agreement with X25519 through YKPiv JCA Provider.
Both new types can be stored in all of the PIV slots.
All operations on the new key types are guarded by FEATURE_CV25519 feature.
New tests for the key types, including different order of JCA providers.

Other changes:

Cache management key type in the PivSession object for simpler coding, use PivSession.getManagementKeyType() to get the value.
Deprecated PivSession.authenticate(ManagementKeyType,byte[]) and added PivSession.authenticate(byte[]) - this new method uses the cached key directly.
Updated DemoApplication so that one can generate the new keys interactively.

Note: PIV curve 25519 key types are supported since YubiKey firmware version 5.7