opcard 1.11.0

OpenPGP smart card implementation
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

// Copyright (C) 2022 Nitrokey GmbH
// SPDX-License-Identifier: LGPL-3.0-only

mod card;

use card::with_card;
use openpgp_card::{
    algorithm::AlgoSimple,
    card_do::{Fingerprint, KeyGenerationTime},
    crypto_data::{Hash, PublicKeyMaterial},
    KeyType,
};
use openpgp_card_sequoia::util::public_key_material_to_key;
use test_log::test;

fn public_key_material_to_fp(
    mat: &PublicKeyMaterial,
    time: KeyGenerationTime,
    ty: KeyType,
) -> Result<Fingerprint, openpgp_card::Error> {
    let key = public_key_material_to_key(mat, ty, &time, None, None)?;

    // Get fingerprint from the Sequoia Key
    let fp = key.fingerprint();
    fp.as_bytes().try_into()
}

#[test]
fn gen_key() {
    if card::dangerous_real_card_enabled() {
        return;
    }

    with_card(|mut card| {
        card.with_tx(|mut tx| {
            let appdata = tx.application_related_data().unwrap();
            assert!(appdata.fingerprints().unwrap().signature().is_none());
            assert!(appdata.fingerprints().unwrap().decryption().is_none());
            assert!(appdata.fingerprints().unwrap().authentication().is_none());

            assert!(tx
                .generate_key_simple(
                    public_key_material_to_fp,
                    KeyType::Signing,
                    AlgoSimple::Curve25519,
                )
                .is_err());

            assert!(tx.verify_pw3(b"12345678").is_ok());
            tx.generate_key_simple(
                public_key_material_to_fp,
                KeyType::Signing,
                AlgoSimple::Curve25519,
            )
            .unwrap();
            let appdata = tx.application_related_data().unwrap();
            assert!(appdata.fingerprints().unwrap().signature().is_some());

            tx.generate_key_simple(
                public_key_material_to_fp,
                KeyType::Decryption,
                AlgoSimple::Curve25519,
            )
            .unwrap();
            let appdata = tx.application_related_data().unwrap();
            assert!(appdata.fingerprints().unwrap().decryption().is_some());

            tx.generate_key_simple(
                public_key_material_to_fp,
                KeyType::Authentication,
                AlgoSimple::Curve25519,
            )
            .unwrap();
            let appdata = tx.application_related_data().unwrap();
            assert!(appdata.fingerprints().unwrap().authentication().is_some());

            tx.generate_key_simple(
                public_key_material_to_fp,
                KeyType::Signing,
                AlgoSimple::NIST256,
            )
            .unwrap();
            tx.generate_key_simple(
                public_key_material_to_fp,
                KeyType::Decryption,
                AlgoSimple::NIST256,
            )
            .unwrap();
            tx.generate_key_simple(
                public_key_material_to_fp,
                KeyType::Authentication,
                AlgoSimple::NIST256,
            )
            .unwrap();

            assert!(tx.verify_pw1_sign(b"123456").is_ok());
            tx.signature_for_hash(Hash::ECDSA(&[3; 32])).unwrap();
        })
    })
}