Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Algorithm IDs for RSA and 25519 #64

Open
felinira opened this issue Dec 22, 2024 · 0 comments
Open

Algorithm IDs for RSA and 25519 #64

felinira opened this issue Dec 22, 2024 · 0 comments

Comments

@felinira
Copy link

Yubico has released firmware 5.7 for a while, which adds RSA-3072, RSA-4096, X25519 and ED25519 algorithm types. https://docs.yubico.com/hardware/yubikey/yk-tech-manual/5.7-firmware-specifics.html#generate-a-new-key-pair

Their algorithm IDs are slightly different. For once, RSA-3072 has been officially assigned id 0x05 https://csrc.nist.gov/pubs/sp/800/78/5/final and RSA-4096 seems to have settled on 0x16 (although I could not find an official source for this)

The nonstandard algorithm IDs for Curve25519 are also different on the yubikey firmware. Considering that NIST will not likely ever standardize the 25519 curve, it seems reasonable to align this implementation with yubico, considering their big prevalence in the market (and the fact that they can't ever change these numbers on old devices due to a lack of firmware updates, even if they were persuaded to do so).

These new algorithm IDs are slowly starting to appear in tooling, and it would be nice if they could be aligned for better compatibility :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant