293 Commits

Author SHA1 Message Date
Robin Krahl a4a4204e70 Replace trussed-rsa-alloc dependency with trussed-rsa-types
trussed-rsa-alloc is only required if both the rsa and the virt feature
are enabled.  We cannot express this currently, but always pulling it in
for the virt feature should be fine too.
2025-08-19 10:36:36 +02:00
Robin Krahl 12b320bc62 Add tests to CI 2025-08-19 09:57:17 +02:00
Robin Krahl 0a0555e114 Remove outdated .gitlab-ci.yaml file 2025-08-18 18:38:38 +02:00
Robin Krahl 015055cb72 Add basic CI workflow
Fixes: https://github.com/trussed-dev/piv-authenticator/issues/36
2025-08-18 17:39:36 +02:00
Robin Krahl 5c858c2dd6 Release v0.5.3 v0.5.3 2025-07-31 16:27:32 +02:00
Robin Krahl fc62282997 Update trussed-rsa-alloc dependency to v0.3 2025-07-31 16:27:32 +02:00
Robin Krahl c3971283c8 Release v0.5.2 v0.5.2 2025-07-31 09:11:57 +02:00
Sosthène Guédon 029fc7083c Update changelog 2025-05-28 10:44:37 +02:00
Sosthène Guédon c66f981cbd Fix missing virt feature dependency 2025-05-28 10:44:37 +02:00
Sosthène Guédon 3fb168002c Improve speed of PIN validation
PIN validation on windows needs to be faster than 750ms.
The decryption operation of the user private key over HPKE is pretty slow

This PR moves this operation to future steps that need access to the key.
It's mostly moving the cost to later, non time-sensitive operations, but it also
saves computation for operations that need to be authenticated but don't need access to the key
2025-05-28 10:44:37 +02:00
Sosthène Guédon 43fbc6211b Use callback-based API for UseValidKey 2025-05-28 09:44:46 +02:00
Sosthène Guédon ba0c78a614 Fix pivy tests 2025-05-28 09:44:46 +02:00
Sosthène Guédon 7794d1e0ca Fix missing clear calls on UseValidKey
Fix https://github.com/trussed-dev/piv-authenticator/issues/29

I wish for a lint that can warn against any use of drop for a type
2025-05-28 09:44:46 +02:00
Sosthène Guédon b3ed091f12 Prepare release 0.5.1 v0.5.1 2025-05-12 17:32:43 +02:00
Sosthène Guédon 381faa1fd0 Fix lints with updated pivy 2025-04-29 14:27:22 +02:00
Sosthène Guédon f840979162 Fix key history object
It should only count keys that are retired.

Also, off-card key certs are also not supported and therefore never counted
2025-04-29 14:27:22 +02:00
Sosthène Guédon 9990a884e2 Add tests for ResetRetryCounter and fix it
Previously when using the PUK the user key was not  restored which
leads to failure when attempting to then perform pin-protected operations
since the user key would fail to decrypt the private keys.
2025-04-24 15:29:41 +02:00
Robin Krahl 2cf70494af Fix v0.5.0 link in changelog 2025-03-18 15:28:07 +01:00
Sosthène Guédon 732b4fd973 Fix supported cryptographic algorithms list 2025-03-14 11:32:34 +01:00
Sosthène Guédon d9d9cf2696 Comment out unusued algorithm IDs 2025-03-14 11:32:34 +01:00
Sosthène Guédon bed5b42ff3 Prepare release 0.5.0 v0.5.0 2025-03-06 09:55:34 +01:00
Sosthène Guédon 001d2f652e Fix lint
It's fine to create zombie processes in tests because tests are short-lived
2025-03-06 09:55:34 +01:00
Sosthène Guédon 9bde6956ef Add RSA3072 algorithm 2025-03-06 09:55:34 +01:00
Sosthène Guédon f869f4f741 Make delog feature explicit 2025-03-06 09:55:34 +01:00
Sosthène Guédon ce32d0b9db Add support for p384 2025-03-06 09:55:34 +01:00