Archives/openpgp-card-app
2
0
Fork 0
mirror of https://github.com/LedgerHQ/openpgp-card-app synced 2024-11-09 07:10:30 +00:00
Code Issues Projects Releases Wiki Activity
56 Commits 4 Branches 55 Tags 7.7 MiB
C 66.5%
Python 30.6%
Shell 1.4%
Makefile 1.1%
CMake 0.4%
14cfe899ff
Go to file
Cédric 14cfe899ff Add full backup/restore with python tool 
app:

- support DO 'B6'/'B8'/'A4' in get/put data for full backup.
  private key are backuped encrypted with AES and a key based on the master seed
- fix missing DO 'CB' access
- fix TERMINATE_DF command: the command did not return
- fix stack corruption in ECC key generation, when key size is greater than 256bits

tools:

- add full backup/restore cli tool

misc:

- add 'make run' rules
2018-10-09 23:42:56 +02:00
doc Fix SSH authentication with Ed25519. 2018-06-04 18:50:38 +02:00
glyphs 1.0 RC2 2017-03-28 19:24:02 +02:00
images reorg some image files 2017-08-30 15:18:36 +02:00
pytools/gpgcard Add full backup/restore with python tool 2018-10-09 23:42:56 +02:00
src Add full backup/restore with python tool 2018-10-09 23:42:56 +02:00
LICENSE Initial commit 2017-03-21 15:21:34 +01:00
Makefile Add full backup/restore with python tool 2018-10-09 23:42:56 +02:00
Makefile.rules 1.2.0 code 2018-05-30 11:44:09 +02:00
README.md Reference the new documentation (try 2...) 2017-08-31 17:15:48 +02:00
script.ld 1.4.1 firmware port 2018-03-13 18:47:55 +01:00

README.md

GnuPG application: blue-app-gnupg

GnuPG application for Ledger Blue and Nano S

This application implements "The OpenPGP card" specification revision 3.0. This specification is available in doc directory and at https://g10code.com/p-card.html .

The application supports:

  • RSA with key up to 4096 bits
  • ECDSA with secp256k1, secp256r1, brainpool 256r1 and brainpool 256t1 curves
  • EDDSA with Ed25519 curve
  • ECDH with secp256k1, secp256r1, brainpool 256r1, brainpool 256t1 and curve25519 curves

This release has known missing parts (see also Add-on) :

  • Ledger Blue support
  • Seed mode ON/OFF via apdu

Installation and Usage

See the full doc at https://github.com/LedgerHQ/blue-app-openpgp-card/blob/master/doc/user/blue-app-openpgp-card.pdf

Add-on

The GnuPG application implements the following addon:

  • serial modification
  • on screen reset
  • 3 independent key slots
  • seeded key generation

Technical specification is available at https://github.com/LedgerHQ/blue-app-openpgp-card/blob/master/doc/developper/gpgcard3.0-addon.rst

Key slot

"The OpenPGP card" specification specifies:

  • 3 asymmetric keys : Signature, Decryption, Authentication
  • 1 symmetric key

The blue application allow you to store 3 different key sets, named slot. Each slot contains the above 4 keys. You can choose the active slot on the main screen. When installed the default slot is "1". You can change it in settings.

seeded key generation

A seeded mode is implemented in order to restore private keys on a new token. In this mode key material is generated from the global token seeded.

Please consider SEED mode as experimental.

More details to come...

On screen reset

The application can be reset as if it was fresh installed. In settings, choose reset and confirm.