v0.5 RSA 2048 Resident Keys Support
Pre-release
Pre-release
Support RSA 2048 Resident Keys:
- import
- sign
- decrypt
- read public key
Documentation is updated with the new details regarding RSA keys:
No new commands, but instead a new parameter for the Resident Key import. The keyhandle received can be then used as with any other key.
Signing operation for RSA keys uses PKCSv15 padding and SHA256 as the hash. The only supported size for the RSA keys is RSA 2048.
RSA raw keys have to be encoded in PKCS#8 DER.
Due to the technical difficulties this release is available only as a simulation binary, signed with a GPG key [email protected]:
sz@stumpy ~/w/w/nitrokey-webcrypt-rust (rsa) [SIGINT]> gpg2 --verify *sig
gpg: assuming signed data in 'nitrokey-webcrypt-udp-simulation-v0.5'
gpg: using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22
gpg: Good signature from "Szczepan Zalega <[email protected]>" [ultimate]
gpg: aka "Szczepan Zalega (Nitrokey) <[email protected]>" [ultimate]