In OpenPGP card specification version 3.3, we have UIF DO description.
GnuPG should provide command line interface to change the value of these data objects (one for signing, one for decryption, and one for authentication).
Description
Description
Details
Details
- Version
- 2.2
Revisions and Commits
Revisions and Commits
rG GnuPG | |||
rG7666a4583007 scd:openpgp: Support UIF changing command. | |||
rG0cb65564e022 g10,scd: Support UIF changing command. |
Event Timeline
Comment Actions
Priority is high, because Gnuk Token requires this feature for testing its implementation.
Comment Actions
Interaction will be something like this:
$ gpg --card-edit ... gpg/card> admin Admin commands are allowed gpg/card> uif usage: uif N [on|off|permanent] 1 <= N <= 3 gpg/card> uif 1 permanent gpg/card> uif 2 permanent gpg/card> uif 3 permanent gpg/card> quit $
Comment Actions
No. I intentionally select: Not-backporting this feature.
The feature is added for Yubikey, in the specification.
Use of the feature by Data-Object is not that so useful.