search

philipWendland / IsoApplet

A Java Card PKI Applet aiming to be ISO 7816 compliant
GNU General Public License v3.0
165 stars 72 forks source link

Allow generation of RSA keys longer than 2048 bits #22

Closed elipsion closed 4 years ago

elipsion commented 4 years ago

When upgrading to Java Card 3.0.4, it would be beneficial to support longer keys (i.e. 3072 and 4096). The full list of key lengths is listed here; I guess it couldn't hurt to add the shorter ones at the same time.

elipsion commented 4 years ago

I would love to make a PR on this, but I don't have access to the relevant ISO documentation. Feel free to reach out to me for further assistance.

philipWendland commented 4 years ago

I agree that 4096 bit RSA should be added for 3.0.4. I started implementing this, as I am stuck with the ECC part of the 3.0.4 features. These large keys might require more changes under the hood; extended length APDUs might become a requirement.

elipsion commented 4 years ago

There has been some development in a fork by llogar, but I don't know how compatible it is.

philipWendland commented 4 years ago

Thanks. I'm closing this, see #23. The requirement of 4096 bit RSA support is noted for future versions.