Implement commands

[sosthene-nitrokey]

PIV standard

• SELECT
• GET DATA - Add support for PUT DATA, GET DATA and fix GENERAL AUTHENTICATE #5
  • Mandatory Data elements:
    • Card Capability Container
    • Card Holder Unique Identifier
      • asymmetric Signature Field
    • X.509 Certificate for PIV Authentication
    • X.509 Certificate for Card Authentication
    • Cardholder Fingerprints
    • Cardholder Facial Image (only up to 1KB)
    • Security Object
  • Conditional Data elements:
    • X.509 Certificate for Digital Signature
    • X.509 Certificate for Key Management
  • Optional Data Elements
    • Printed Information (Not applicable)
    • Discovery Object
    • Key History Object
    • Retired X.509 Certificates for Key Management
    • Cardholder Iris Images
    • Biometric Information Templates Group Template
    • Secure Messaging Certificate Signer
    • Pairing Code Reference Data Container UUIDs:
    • Card UUID
• VERIFY
  • Global Pin
  • PivPin
  • Primary finger OCC (Optional)
  • Secondary finger OCC (Optional)
  • Pairing Code (for NFC only)
• CHANGE REFERENCE DATA
  • PivPIn
  • Puk
• RESET RETRY COUNTER
• GENERAL AUTHENTICATE
  • Witness
  • Challenge - General authenticate - challenge response #3
  • Response - General authenticate - challenge response #3
  • Exponentiation
• PUT DATA - Add support for PUT DATA, GET DATA and fix GENERAL AUTHENTICATE #5
• GENERATE ASYMMETRIC KEYPAIR

Yubico extensions

• Set management key
• Import asymmetric key Support importing private keys functionality #41
• Get Version (Not applicable?)
• Reset
• Set Pin Retries
• Attest (Not applicable?)
• Get Serial (Not applicable?)
• Get Metadata

[stv0g]

New YubiKey extensions as part of their 5.7 firmware update should be probably added to this list:

• Move keys between slots
• Delete keys from slots
• AES management keys
• New algorithms
  • RSA 3072
  • RSA 4096
  • X25519
  • Ed25519

See: https://docs.yubico.com/hardware/yubikey/yk-tech-manual/5.7-firmware-specifics.html#piv-enhancements