Scp11KeyParameters Class

Namespace: Yubico.YubiKey.Scp Assembly: Yubico.YubiKey.dll

SCP key parameters for performing SCP11 authentication. For SCP11b only keyReference and pkSdEcka are required. Note that this does not authenticate the off-card entity (OCE). For SCP11a and SCP11c the off-card entity (OCE) CA key reference must be provided, as well as the off-card entity (OCE) secret key and certificate chain.

C#

public sealed class Scp11KeyParameters : ScpKeyParameters

Inheritance object ScpKeyParameters Scp11KeyParameters

Constructors

Name	Description
Scp11KeyParameters(KeyReference, ECPublicKey)	Creates a new Scp11KeyParameters instance for SCP11b.
Scp11KeyParameters(KeyReference, ECPublicKey, KeyReference, ECPrivateKey, IReadOnlyCollection<X509Certificate2>)	Creates a new Scp11KeyParameters instance. This is used to initiate SCP11A and SCP11C connections.
Scp11KeyParameters(KeyReference, ECPublicKeyParameters, KeyReference, ECPrivateKeyParameters, IReadOnlyCollection<X509Certificate2>)

Properties

Name	Description
OceCertificates	The certificate chain, containing the public key for the off-card entity (OCE) (SCP11a/c).
OceKeyReference	The key reference of the off-card entity (OCE) (SCP11a/c).
PkSdEcka	The public key of the security domain which is used for key agreement between the off-card entity (OCE) and Yubikey (SCP11a/b/c). 'pkSdEcka' is short for Public Key Security Domain Elliptic Curve Key Agreement (Key)
SkOceEcka	The secret key of the off-card entity (OCE) which is used for key agreement between the off-card entity and the YubiKey (SCP11a/c). 'skOceEcka' is short for Secret Key Off-Card Entity Elliptic Curve Key Agreement (Key)

Methods

Name	Description
Dispose()	This will clear all references and sensitive buffers