Hi, I'm testing the PIV application on a Nitrokey 3 NFC (firmware 1.8.2) and I noticed that retrieving the certificate is rather slow when the slot is empty. On a GET DATA command the 6A82 response is returned in ~127ms, and polling the 20 retired slots take over 2 seconds. For comparison, with the Yubikey 5 GET DATA returns in less than 1ms when the slot is empty.
Is this a hardware limitation or a software issue?
I'd like to use the 82-95 slots for storing the certificate chain of the signing certificates in the slots 9A/9C. This means polling the 20 slots when signing to build the full chain, but it slows down the operation significantly.
Hi, I'm testing the PIV application on a Nitrokey 3 NFC (firmware 1.8.2) and I noticed that retrieving the certificate is rather slow when the slot is empty. On a
GET DATAcommand the6A82response is returned in ~127ms, and polling the 20 retired slots take over 2 seconds. For comparison, with the Yubikey 5GET DATAreturns in less than 1ms when the slot is empty.Is this a hardware limitation or a software issue?
I'd like to use the 82-95 slots for storing the certificate chain of the signing certificates in the slots 9A/9C. This means polling the 20 slots when signing to build the full chain, but it slows down the operation significantly.