-
Notifications
You must be signed in to change notification settings - Fork 25
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update trussed and dependencies #248
Conversation
77cde3e
to
e479778
Compare
Should we enable RSA-3072 key generation for opcard? |
It takes around 20min to generate an RSA3072 key. I'll rerun the test to take accurate timing information, and do it twice (once with the rsa and num-bigint-dig crates optimized with |
e479778
to
88333cc
Compare
Key generation takes around 20minutes for RSA3072. I don't think it's worth enabling it. Maybe in a future update it can be configurable through nitropy, so that only users that know about the slowness use it. |
88333cc
to
c8b7f56
Compare
@@ -387,6 +387,7 @@ impl<R: Runner> App<R> for OpcardApp<R> { | |||
const BACKENDS_OPCARD: &[BackendId<Backend>] = &[ | |||
BackendId::Custom(Backend::SoftwareRsa), | |||
BackendId::Custom(Backend::Auth), | |||
BackendId::Custom(Backend::Staging), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You should add it to PIV too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good point.
This patch updates many dependencies, most importantly: - Trussed to v0.1.0-nitrokey.11 - secrets-app to v0.10.0 - opcard to v1.0.0 - piv-authenticator to v0.2.0 - trussed-auth to v0.2.2 It also adds the trussed-staging backend for opcard and piv-authenticator.
c8b7f56
to
3d6f0c3
Compare
Depends on: