Yubikey PIV and PIN Policy

[NIIBE Yutaka]

Hello,

Thank you for your testing.

It would make sense to extend GENKEY/WRITEKEY command of scdaemon, but
currently, there is no way in GnuPG to configure this kind of
device-specific metadata when it goes to GENKEY/WRITEKEY of scdaemon.
(I assumed/assume that it is done by other tool.)

It would also make sense to extend SETATTR command of scdaemon.

Valtteri Vuorikoski wrote:
> It might be a good idea to preserve the old logic where slot 9C is
> hardcoded to always-ask to deal with old Yubikey 4 devices (firmware
> older than 5.3) that don't support GET METADATA and non-Yubico PIV
> cards.

Thank you for your suggestion.  Indeed, the patch I sent was not good
for non-METADATA-supported device.

Attached is an update.  If no objections, this will be pushed to master.
-- 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-scd-piv-Check-PIN-Policy-to-decide-about-the-verific.patch
Type: text/x-diff
Size: 5534 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20261007/c7a6a689/attachment.patch>