PER-3799

Initial support for ECC keys and certificates

ECC keys, certificates, and crypto operations are now supported in Personal Desktop Client over PKCS#11 interface and in Windows minidriver.

ECC support has been added only to CardOS 5.0+ cards. Generating and importing ECC keys is currently only supported for up to 256-bit curves. The following curves are are supported:

• secp192k1 (1.3.132.0.31)

• secp192r1 aka prime192v1 (1.2.840.10045.3.1.1)

• secp224r1 (1.3.132.0.33)

• secp256k1 (1.3.132.0.10)

• secp256r1 aka prime256v1 (1.2.840.10045.3.1.7)

• brainpoolP160r1 (1.3.36.3.3.2.8.1.1.1)

• brainpoolP192r1 (1.3.36.3.3.2.8.1.1.3)

• brainpoolP224r1 (1.3.36.3.3.2.8.1.1.5)

• brainpoolP256r1 (1.3.36.3.3.2.8.1.1.7)

PER-4704

Support for D-Trust 5.1 and 5.4 profiles with ECC

The D-Trust 5.1 and 5.4 profiles that use ECC keys and certificates are now supported by Personal Desktop Client. Similar to RSA profiles, users must use the D-Trust Card Assistant for PIN activation, modification, and the unblock functionality.

PER-4701

Add BUILTIN_ICCSN variable to .cpf

It is possible to use the BUILTIN_ICCSN variable in .cpf files to read ICCSN (chip serial number) from the card.

PER-4724

Increase CTK.CloseP11SessionsDelay to 900 seconds

The default value for CTK.CloseP11SessionsDelay is now set to 900 seconds. This is used for PIN caching in the CryptoTokenKit extension.