-
Version 2.2 Stable
released this
2022-06-06 20:27:33 +08:00 | 807 commits to master since this releaseThis version implements a new CCID stack to reduce the original file size by a 30%. It implements only those features that are used by the Pico HSM. In parallel, MbedTLS is also reconfigured to enable only the required algorithms.
Version 2.2 has the following enhancements:
- Key domains: it supports up to 16 different key domains, with their own DKEK and private/secret keys. Key domains can be used with SCS3 tool.
- Key usage counter: when the counter is enabled, the key can be used only n times before being disabled. It allows to limit the use of a key and perform and audit of its usage. The counter is reduced by 1 every time the key is used for signing, decrypting or deriving.
- Optional key usage counter for all keys: when enabled, all generated keys are attached to a counter with the initial value of
2^32-1(FFFFFFFEh) to track its usage. - PIN DKEK is encrypted with a random IV.
- DKEK consistency with internal CRC.
- Removed dependency with Gnuk and OpenSC.
- Many fixes.
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v2.0...v2.2
Downloads