Add tag 0x85 parsing and ECDH shared secret computation for P-256 and
P-384 curves using mbedtls_ecdh APIs. The peer's uncompressed public key
is read from tag 0x85, the card's private key is loaded, and the shared
secret is returned in tag 0x82 within a 0x7C dynamic authentication
template, per NIST SP 800-73-4.
Unsupported algorithms (e.g. X25519, RSA) return SW_INCORRECT_P1P2."
A possible workaround is to detect whether sub-DO are called (GnuPG) or management AID is called (Yubico).
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
and add the Enterprise / Commercial licensing option.
Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
* Community Edition: AGPLv3 (strong copyleft, including network use).
* Enterprise / Commercial Edition: proprietary license for production /
multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
ENTERPRISE.md and clarifying how companies can obtain a commercial license.
Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
alternative proprietary license that allows internal, large-scale, or OEM
use (bulk provisioning, policy enforcement, inventory / revocation,
custom attestation, signed builds) without AGPL disclosure obligations.
This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
Sammy ETUR
Pol Henarejos