Skip to content
This repository has been archived by the owner on Jan 28, 2020. It is now read-only.

Latest commit

 

History

History
32 lines (29 loc) · 1.24 KB

MyEstEID.md

File metadata and controls

32 lines (29 loc) · 1.24 KB
Raw

v0.1 specification

In spirit and setting very much similar to OpenPGP 2.0. Re-uses [[FakeEstEID]] for giving an EstEID compatible interface but unlike FakeEstEID is actually intended for securely generating and storing keys. Suitable for personal use or for small rollouts (a small company with a single security officer issuing cards)

  • 3 (4) PIN codes
  • PIN1 - authentication & decryption
  • PIN2 - signature
  • PUK (Admin PIN)
  • Duress PIN (erases all keys and data if used)
  • 3 key and certificate pairs
  • Currently only RSA2048 due to Baastarkvara limitations
  • Authentication (PIN1)
  • Digital signature (PIN2 every time)
  • Encryption (PIN1)
  • Ability to re-generate keys
  • Requires PUK code
  • Overwriting existing key requires relevant PIN code
  • Ability to import keys
  • Requires PUK code
  • Overwriting existing key requires relevant PIN code
  • Ability to write Personal Data file
  • Requires PUK code
  • Ability to write special options
  • Requires PUK code
  • Duress PIN on/off
  • Contactless interface on/off
  • ...

Command line utility

All about the EstEID