Hi Douglas,

the same problem exists for RSA keys. If you specify an invalid key
size, the code tries to generate invalid objects.

Our fix ist at

https://github.com/CardContact/OpenSC/commit/a9682fd704dca5abc028b32e5ec577aa1c12ee78

Andreas

Am 25.09.2012 16:31, schrieb Douglas E. Engert:
>
> On 9/25/2012 5:01 AM, Andreas Schwier (ML) wrote:
>> Dear all,
>>
>> we've come a across a strange issue in OpenSC. When we try to generate a
>> key pair with parameters not supported by the card, then the framework
>> code still tries to allocate private/public key objects rather than
>> returning an error code.
>>
>> The questionable code is in line 2675 of framework-pkcs15.c /
>> pkcs15_gen_keypair.
>>
>> Is that an intended behaviour or a plain bug ?
> Same problem as before. No one has had a PKCS#15 card that supports ECC.
>
> The original ECC code added to OpenSC was for client use only, and used
> the PIV card. For testing the piv-tool could tell the card to generate
> a key pair, but that was not via and PKCS standards.
>
>> Andreas
>>


-- 

    ---------    CardContact Software & System Consulting
   |.##> <##.|   Andreas Schwier
   |#       #|   Schülerweg 38
   |#       #|   32429 Minden, Germany
   |'##> <##'|   Phone +49 571 56149
    ---------    http://www.cardcontact.de
                 http://www.tscons.de
                 http://www.openscdp.org

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to