Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

sc-hsm-tool: Add options for public key authentication #1711

Closed
wants to merge 23 commits into from
Closed

sc-hsm-tool: Add options for public key authentication #1711

Changes from 1 commit
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
eee3f76
pkcs11-tool: Add prime521v1 curve
Mar 29, 2019
4a8d484
pkcs11-tool: Add secp521k1 curve
Mar 29, 2019
81ca015
sc-hsm-tool: Add options for public key auth
May 15, 2018
ccdbc6d
sc-hsm: Initialize card with public key auth
May 15, 2018
dec0dd3
sc-hsm-tool: Add option --export-for-pub-key-auth
Aug 8, 2018
0a074f5
sc-hsm-tool: Add option --register-public-key
Aug 8, 2018
9e5058c
sc-hsm-tool: Add option --public-key-auth-status
Jun 11, 2019
997b2f7
coding style
Jun 18, 2019
e9be520
convert spaces to tabs (consistent coding style)
Jun 20, 2019
ad35788
sc-hsm: use memcpy() instead of strncpy()
Jun 20, 2019
b340b09
sc-hsm: use smaller recvbuf
Jun 20, 2019
99faf14
sc-hsm: use sc_format_apdu_ex()
Jun 20, 2019
bf097e4
sc-hsm-tool: use fread_to_eof()
Jun 20, 2019
1e46ee4
sc-hsm: fix messed up formatting
Jun 20, 2019
60004bb
sc-hsm: fix error message
Jun 20, 2019
6c69699
sc-hsm-tool: improve argument checks
Jun 20, 2019
6287346
Revert "sc-hsm-tool: use fread_to_eof()"
Jun 20, 2019
5f14397
sc-hsm-tool: simplify argument checks
Jun 20, 2019
953b64f
sc-hsm-tool: use goto for error handling
Jun 20, 2019
de3d8e4
sc-hsm: strlen() -> strnlen()
Jun 20, 2019
5729c5e
sc-hsm-tool: check for expected tags (.pka files)
Jun 20, 2019
c06a843
adjust sc_format_apdu_ex() calls
Oct 17, 2019
1eddb58
check for possible out of bounds write
Oct 29, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
sc-hsm-tool: improve argument checks
  • Loading branch information
Frank Braun committed Oct 29, 2019
commit 6c69699fc6c0751cae625992fbaafeda439bbefd
22 changes: 18 additions & 4 deletions src/tools/sc-hsm-tool.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -573,7 +573,7 @@ static void print_info(sc_card_t *card, sc_file_t *file)



static int initialize(sc_card_t *card, const char *so_pin, const char *user_pin, int retry_counter, const char *bio1, const char *bio2, int dkek_shares, int num_of_pub_keys, int required_pub_keys, const char *label)
static int initialize(sc_card_t *card, const char *so_pin, const char *user_pin, int retry_counter, const char *bio1, const char *bio2, int dkek_shares, signed char num_of_pub_keys, u8 required_pub_keys, const char *label)
{
sc_cardctl_sc_hsm_init_param_t param;
size_t len;
Expand Down Expand Up @@ -680,8 +680,8 @@ static int initialize(sc_card_t *card, const char *so_pin, const char *user_pin,
}

param.dkek_shares = (char)dkek_shares;
param.num_of_pub_keys = (char)num_of_pub_keys;
param.required_pub_keys = (u8)required_pub_keys;
param.num_of_pub_keys = num_of_pub_keys;
param.required_pub_keys = required_pub_keys;
param.label = (char *)label;

r = sc_card_ctl(card, SC_CARDCTL_SC_HSM_INITIALIZE, (void *)&param);
Expand Down Expand Up @@ -1998,6 +1998,8 @@ int main(int argc, char *argv[])
int opt_password_shares_total = -1;
int opt_force = 0;
int opt_iter = 10000000;
signed char num_of_pub_keys = -1;
u8 required_pub_keys = 1;
sc_context_param_t ctx_param;
sc_context_t *ctx = NULL;
sc_card_t *card = NULL;
Expand Down Expand Up @@ -2114,6 +2116,18 @@ int main(int argc, char *argv[])
fprintf(stderr, "Option -n (--required-pub-keys) requires option -X\n");
exit(1);
}
if (opt_num_of_pub_keys != -1) {
if (opt_num_of_pub_keys < 1 || opt_num_of_pub_keys > 90) {
fprintf(stderr, "Argument to option -K (--public-key-auth) must be between 1 and 90 \n");
exit(1);
}
if (opt_required_pub_keys < 1 || opt_required_pub_keys > opt_num_of_pub_keys) {
fprintf(stderr, "Argument to option -n (--required-pub-keys) must be between 1 and %d\n", opt_num_of_pub_keys);
exit(1);
}
num_of_pub_keys = (signed char)opt_num_of_pub_keys;
required_pub_keys = (u8)opt_required_pub_keys;
}
if (do_initialize && do_export_key) {
fprintf(stderr, "Option -e (--export-for-pub-key-auth) excludes option -X\n");
exit(1);
Expand Down Expand Up @@ -2203,7 +2217,7 @@ int main(int argc, char *argv[])
goto fail;
}

if (do_initialize && initialize(card, opt_so_pin, opt_pin, opt_retry_counter, opt_bio1, opt_bio2, opt_dkek_shares, opt_num_of_pub_keys, opt_required_pub_keys, opt_label))
if (do_initialize && initialize(card, opt_so_pin, opt_pin, opt_retry_counter, opt_bio1, opt_bio2, opt_dkek_shares, num_of_pub_keys, required_pub_keys, opt_label))
goto fail;

if (do_create_dkek_share && create_dkek_share(card, opt_filename, opt_iter, opt_password, opt_password_shares_threshold, opt_password_shares_total))
Expand Down