KDF-DO support #40

Closed
opened 2025-07-11 14:23:03 +08:00 by muks · 1 comment
muks commented 2025-07-11 14:23:03 +08:00 (Migrated from github.com)

Hello! Good work on creating this project! I have a question:

The README says this:

Note that PIN is conveyed from the host to the Pico in plain text if no secure channel is provided.

Is there support for non-empty KDF-DO (section 4.3.2 of OpenPGP card specification v3.4.1)? Do you plan to implement support for it?

Hello! Good work on creating this project! I have a question: The README says this: > Note that PIN is conveyed from the host to the Pico in plain text if no secure channel is provided. Is there support for non-empty KDF-DO (section 4.3.2 of OpenPGP card specification v3.4.1)? Do you plan to implement support for it?
muks commented 2025-07-11 15:16:54 +08:00 (Migrated from github.com)

Nevermind; it's not clear if this provides any extra security as it appears the derived key transmitted over the wire would be constant.

Nevermind; it's not clear if this provides any extra security as it appears the derived key transmitted over the wire would be constant.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dearsky/pico-openpgp#40