Re: [opensc-devel] PIV: signature output format

2012-08-13 Thread Douglas E. Engert
On 8/13/2012 3:00 AM, Andreas Schwier wrote: > Hi Douglas, > > I'm fine with that. I already changed our card driver to provide the > r||s format anyway. > > After 0.13.0 we should work on the issue. > > Did anyone already considered implementing support for PKCS#1 PSS format ? Not that I know o

Re: [opensc-devel] PIV: signature output format

2012-08-13 Thread Andreas Schwier
Hi Douglas, I'm fine with that. I already changed our card driver to provide the r||s format anyway. After 0.13.0 we should work on the issue. Did anyone already considered implementing support for PKCS#1 PSS format ? We have support for it in the SmartCard-HSM and want to add it to OpenSC. An

Re: [opensc-devel] PIV: signature output format

2012-08-12 Thread Douglas E. Engert
On 8/11/2012 1:26 PM, Andreas Schwier (ML) wrote: > Hi Viktor and Douglas, > > I do also favour to keep the DER signature format at the interface > between the card driver and the pkcs15 framework. OK, we could do that. I would like to wait till after 0.13.0 is released, as the current code is

Re: [opensc-devel] PIV: signature output format

2012-08-11 Thread Andreas Schwier (ML)
Hi Viktor and Douglas, I do also favour to keep the DER signature format at the interface between the card driver and the pkcs15 framework. At the card driver level we don't know the field size, but we do at the pkcs15 framework level. And all cards I know use the DER encoded signature format any

Re: [opensc-devel] PIV: signature output format

2012-06-25 Thread Viktor Tarasov
On Mon, Jun 25, 2012 at 9:22 PM, Douglas E. Engert wrote: > Just back from vacation... > > > On 6/21/2012 9:50 AM, Viktor TARASOV wrote: > >> Hi Douglas, >> >> I'm trying to get signature with the PIV card and verify it with the >> 'openssl pkeyutl'. >> I use EC key #04 "CARD AUTH Key". >> >> It

Re: [opensc-devel] PIV: signature output format

2012-06-25 Thread Douglas E. Engert
Just back from vacation... On 6/21/2012 9:50 AM, Viktor TARASOV wrote: > Hi Douglas, > > I'm trying to get signature with the PIV card and verify it with the 'openssl > pkeyutl'. > I use EC key #04 "CARD AUTH Key". > > It fails because of the 'raw' output format of the signature produced by > Op

[opensc-devel] PIV: signature output format

2012-06-21 Thread Viktor TARASOV
Hi Douglas, I'm trying to get signature with the PIV card and verify it with the 'openssl pkeyutl'. I use EC key #04 "CARD AUTH Key". It fails because of the 'raw' output format of the signature produced by OpenSC. OpenSSL expects the signature as a ASN1 sequence of two integers. I've seen in c