arekinath / PivApplet

PIV applet for JavaCard 2.2.2 and 3.0.4+ with full ECDSA/ECDH support
111 stars 37 forks source link

Correct behaviour of "PIN always" #11

Closed arekinath closed 6 years ago

arekinath commented 6 years ago

Currently "PIN always" is implemented as a flag that "consumes" the PIN entry on usage of a "PIN always" key. As outlined in #5, the true behaviour is to enforce that the APDU command directly before the slot usage was a VERIFY, and produce an error on any other condition.