New project starting: Custom CTK driver for macOS to add caching of PIN for slot 9C (digital signing). This is allowed by NISTIR 7863.
The practical application is that if you send lots of emails signed with a smart card from Outlook or Mail.app on a Mac, you won't have to enter your PIN each time you send a message.
Successfully achieved smart card mtls authentication, sudo, and account pairing with the custom macOS PIV extension. Even shows a local push when validating the PIN because awesome is the only way i know how to play.
Already some improvements on the built-in PIV extension. The number of PIN attempts remaining in a push when authenticating 😍.
We have liftoff! The project has a name (PIV+), works with most everything you throw at it (including auth at FV login). Even a video with a lab coat!
Twocanoes Software