[PATCH] scd: Improve KDF-DO support

NIIBE Yutaka gniibe at fsij.org
Thu Feb 8 11:43:46 CET 2018

Arnaud Fontaine <arnaud.fontaine at ssi.gouv.fr> wrote:
> the specification (section 4.4.1, page 22, in v3.3) says:
> "Constructed DOs (C, marked yellow) are returned including their tag and
> length"
> and in the same section, page 25, F9 (KDF-DO) in marked as a constructed
> DO, "format C".
> So, from my understanding of these elements, the KDF-DO must be returned
> with its tag and length.

Well, I have test version of Version 3.3 card from Achim.  It doesn't
put tag for 65 and 6E, at least.

I don't think it supports KDF-DO.

In this situation, I think that it's better for GnuPG to allow an
implementation of omitting tag, even if it allows violation of the

More information about the Gnupg-devel mailing list