Module yubirs::crypto

Constants

DES_CHALLENGE_BYTES

The number of bytes in a PIV management key challenge.

MGM_KEY_BYTES

The number of bytes a binary management key must contain (3DES keys are 8 bytes each, so 8 * 3 = 24 bytes total).

Functions

decrypt_des_challenge

encrypt_des_challenge

is_weak_mgm_key

Returns true if the given managment key’s 3 DES keys are “weak”, and therefore shouldn’t be used. The given input management key should have been decoded from hex, but no parity bits should have been added yet (this is done implicitly).