[PATCH] scd: Improve KDF-DO support
arnaud.fontaine at ssi.gouv.fr
Mon Feb 12 10:36:18 CET 2018
so you (will) have the same problem with the current implementation
where KDF_ITERSALTED_S2K is systematically applied when the card
supports KDF (bit set in the extended capabilities) and a KDF-DO is
present (whatever its content).
Le 08/02/2018 à 19:50, Achim Pietig a écrit :
> the actual V3.3 card returns H81, &H01, &H00, &H9000 to a Get Data with P1P2 = 00F9, that means KDF-DO is present, but not used/personalised.
> Am 08.02.2018 um 19:03 schrieb Arnaud Fontaine:
>> I think adding some examples is a good idea to clarify ambiguous
>> sentences such as the one I have quoted.
>> So no encapsulating tag in the response, only the child ones. Correct ?
>> If this is correct, the following patch is enough to trigger the
>> KDF_ITERSALTED_S2K only when needed.
More information about the Gnupg-devel