Skip to content

Releases: wookey-project/javacard-applet

Enhanced HMAC handling, bugfixes in secure channel support

05 Sep 12:11
Compare
Choose a tag to compare

[bugfixes]

  • Bugfix in secure channel APDU encryption (missing offset)
  • Bugfix in AES CBC mode where doFinal must be calle in place of Update because of potential buffering yielding in bad result + check in AES when inputbuffer == outputffer and overlapping buffers (see Javacard API)
  • Use non overlapping buffer when encrypting data in get_key

[enhancements]

  • Better handling of native versus non-native HMAC + explicit warnings to the end user
  • Remove transaction when constructing persistent objects since some Javacards do not support this well
  • Remove DEBUG mode in the WooKey class since it is not necessary in production

minor security patches, CI support

29 Aug 08:14
c8e7161
Compare
Choose a tag to compare
v0.9.2

minor security patches, CI support

Applets keyfiles handling update at compile time

12 Jun 07:42
v0.9.1
Compare
Choose a tag to compare

This release increase the security of the SDK build time, handling the private key files through a temporary build directory only instead of caching them in the applet sources.

This update is a security update on the build system