Skip to content

Add PIV decryption support to CryptoTokenKit extension#173

Closed
jdmoreira wants to merge 2 commits intomainfrom
dennis/decryption
Closed

Add PIV decryption support to CryptoTokenKit extension#173
jdmoreira wants to merge 2 commits intomainfrom
dennis/decryption

Conversation

@jdmoreira
Copy link
Member

@jdmoreira jdmoreira commented Nov 12, 2025

This PR enables the Yubico Authenticator to handle RSA decryption requests from third-party applications via CryptoTokenKit.

Previously, the extension only supported signData operations. This change introduces a decryptData operation, which is the core functionality required to allow compatible mail clients to decrypt encrypted emails using the private key stored on a YubiKey's PIV application.

@jdmoreira jdmoreira mentioned this pull request Nov 12, 2025
@jdmoreira jdmoreira changed the title Dennis/decryption Email S/MIME PIV Encryption Nov 13, 2025
@jdmoreira jdmoreira changed the title Email S/MIME PIV Encryption Add PIV decryption support to CryptoTokenKit extension Nov 13, 2025
@franekSoftSF
Copy link

I tested the Mail app for iOS version 26.2.1 on Apple iOS, and the problem persists. I tested with two separate certificates in slots 9C and 9D, as well as one shared 9C certificate.

@jdmoreira
Copy link
Member Author

Closing this. It's already in branch build/1.13.0

@jdmoreira jdmoreira closed this Feb 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants