[Draft] Add support for setting PIN/PUK retries#150

Closed

Quantu wants to merge 9 commits intogo-piv:v2from Quantu:add_setting_pin_puk_retries

+182-80

Commits on Jul 8, 2024

Add dynamic support for AES128/192/256 management keys, including setting them. Prefer AES192 over 3DES when possible.

Quantu
authored and
quantu
committed
Explicit version check for yubikey AES management key support, improve error messages to indicate key type and allowed key lengths

Quantu
authored and
quantu
committed
Revert leftover unnecessary logic structure change from previous edits

Quantu
authored and
quantu
committed
Update README.md for variable length keys and add mention of AES support firmware version

Quantu
authored and
quantu
committed
Add version check to ykAuthenticate for metadata check to determine management key type, relocate version/keytype code from SetManagementKey to ykSetManagementKey, move ykAuthenticate call from ykS…

Quantu
authored and
quantu
committed
Update supportsVersion to use *version and bytes instead of Version and ints to eliminate a lot of unnecessary calls to .Version()

Quantu
authored and
quantu
committed
Undo unnecessary/out-of-scope changes to SetMetadata and ykSetProtectedMetadata.

Quantu
authored and
quantu
committed
Add ability to change PIN and PUK retry thresholds

Quantu
authored and
quantu
committed
Update SetRetries and ykSetPinPukRetries to pass version for ykAuthenticate

Quantu
authored and
quantu
committed