Update repo url to DT

StarGate01 · StarGate01 · commit e7672d25cb2c · 2022-08-18T08:59:53.000+02:00
diff --git a/.drone.yml b/.drone.yml
@@ -12,7 +12,7 @@ steps:
 - name: clone
   image: alpine/git
   commands:
-  - git clone https://github.com/StarGate01/flexsecure-applets .
+  - git clone https://github.com/DangerousThings/flexsecure-applets .
   - git -c submodule."smartcard-ci".update=none submodule update --init --recursive
 - name: build  
   image: stargate01/smartcard-ci
diff --git a/.gitmodules b/.gitmodules
@@ -1,6 +1,6 @@
 [submodule "applets/vk-ykhmac"]
 	path = applets/vk-ykhmac
-	url = https://github.com/StarGate01/vk-ykhmac
+	url = https://github.com/DangerousThings/flexsecure-ykhmac.git
 [submodule "applets/Flex-OTP"]
 	path = applets/Flex-OTP
 	url = https://github.com/StarGate01/Flex-OTP
@@ -12,13 +12,13 @@
 	url = https://github.com/OpenJavaCard/openjavacard-ndef
 [submodule "smartcard-ci"]
 	path = smartcard-ci
-	url = https://github.com/StarGate01/smartcard-ci
+	url = https://github.com/DangerousThings/smartcard-ci.git
 [submodule "applets/u2f-javacard"]
 	path = applets/u2f-javacard
 	url = https://github.com/darconeous/u2f-javacard.git
 [submodule "applets/vk-u2f"]
 	path = applets/vk-u2f
-	url = https://github.com/VivoKey/vk-u2f.git
+	url = https://github.com/VivoKey/apex-fido2-ctap.git
 [submodule "applets/javacard-memory"]
 	path = applets/javacard-memory
-	url = https://github.com/StarGate01/javacard-memory.git
+	url = https://github.com/DangerousThings/javacard-memory.git
diff --git a/README.md b/README.md
@@ -1,4 +1,4 @@
-[![Build Status](https://drone-github.chrz.de/api/badges/StarGate01/flexsecure-applets/status.svg)](https://drone-github.chrz.de/StarGate01/flexsecure-applets)
+[![Build Status](https://drone-github.chrz.de/api/badges/DangerousThings/flexsecure-applets/status.svg)](https://drone-github.chrz.de/DangerousThings/flexsecure-applets)
 
 # flexsecure-applets
 
@@ -8,7 +8,7 @@ For documentation, see `docs/` . Or read the forums at https://forum.dangerousth
 
 ## Download
 
-Compiled binaries are available from the GitHub releases page: https://github.com/StarGate01/flexsecure-applets/releases .
+Compiled binaries are available from the GitHub releases page: https://github.com/DangerousThings/flexsecure-applets/releases .
 
 ## Development Usage
 
diff --git a/applets/vk-ykhmac b/applets/vk-ykhmac
@@ -1 +1 @@
-Subproject commit 90f195d50b56374c09dde8bd5a2338583cf6efbf
+Subproject commit ef2b36002adef08b1da0c1eacfd6688e088d6041
diff --git a/docs/1-technology.md b/docs/1-technology.md
@@ -104,4 +104,4 @@ Instances are retained across card resets and power cycles, and so is their non-
 - https://smartcard-atr.apdu.fr/
 - https://www.eftlab.com/knowledge-base/211-emv-aid-rid-pix/
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/2-hardware.md b/docs/2-hardware.md
@@ -91,6 +91,6 @@ If you want full offline control over your hardware and keys, the maximum possib
 - https://www.javacardos.com/store/products/11020
 - https://fidesmo.com/
 - https://github.com/fidesmo/fdsm
-- https://github.com/StarGate01/javacard-memory
+- https://github.com/DangerousThings/javacard-memory
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/3-dev-setup.md b/docs/3-dev-setup.md
@@ -46,7 +46,7 @@ Nr.  Card  Features  Name
 
 ### Applet Emulation
 
-Clone `jcardsim` from https://github.com/StarGate01/jcardsim using git. To emulate the compiled applet, run:
+Clone `jcardsim` from https://github.com/DangerousThings/jcardsim using git. To emulate the compiled applet, run:
 
 ```
 java -cp jcardsim-3.0.5-SNAPSHOT.jar:TARGET com.licel.jcardsim.remote.VSmartCard CONFIG.cfg
@@ -86,7 +86,7 @@ To "eject" the card, just stop the Jcardsim process.
 
 ## Docker Container
 
-If you do not want to clutter your system, or don't have a compatible Linux system, you can use a pre-made Docker container for compilation. Install Docker, and use the image at https://hub.docker.com/r/stargate01/smartcard-ci . You can find the source Dockerfile at https://github.com/StarGate01/smartcard-ci . This image is also used to compile the applets distributed via https://github.com/StarGate01/flexsecure-applets/releases .
+If you do not want to clutter your system, or don't have a compatible Linux system, you can use a pre-made Docker container for compilation. Install Docker, and use the image at https://hub.docker.com/r/stargate01/smartcard-ci . You can find the source Dockerfile at https://github.com/DangerousThings/smartcard-ci . This image is also used to compile the applets distributed via https://github.com/DangerousThings/flexsecure-applets/releases .
 
 To run a command inside the Docker container:
 
@@ -96,7 +96,7 @@ docker run -it --rm -v SOURCES:/app/src:rw stargate01/smartcard-ci "command"
 
 Replace `SOURCES` with the absolute path to your source code directory, and `"command"` with the command you want to run.
 
-You can look at the compilation scripts in https://github.com/StarGate01/flexsecure-applets for reference.
+You can look at the compilation scripts in https://github.com/DangerousThings/flexsecure-applets for reference.
 
 The container also contains the virtual smartcard emulator, as well as the Bats test runner. You can use that to run tests against emulated applets. Refer to the test scripts in the repository.
 
@@ -111,16 +111,16 @@ Do not remove the management applet package (`A0000001515350`), or security cont
 ## Sources and Further Readingfdsm
 
 - https://www.docker.com/
-- https://github.com/StarGate01/smartcard-ci/blob/master/Dockerfile
-- https://github.com/StarGate01/flexsecure-applets/tree/master/scripts
+- https://github.com/DangerousThings/smartcard-ci/blob/master/Dockerfile
+- https://github.com/DangerousThings/flexsecure-applets/tree/master/scripts
 - https://frankmorgner.github.io/vsmartcard/
 - https://pcsclite.apdu.fr/
-- https://github.com/StarGate01/jcardsim
+- https://github.com/DangerousThings/jcardsim
 - https://www.eftlab.com/knowledge-base/171-atr-list-full/
 - https://github.com/LudovicRousseau/pcsc-tools/blob/master/smartcard_list.txt
 - https://github.com/bats-core/bats-core
 - https://github.com/martinpaljak/GlobalPlatformPro
 - https://github.com/fidesmo/fdsm
 - https://fidesmo.com/technology/java-card/
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/applets/1-pgp.md b/docs/applets/1-pgp.md
@@ -8,7 +8,7 @@ Explaining the theory of public-key cryptography is out of scope, please refer t
 
 - Repository: https://github.com/ANSSI-FR/SmartPGP (javacard-3.0.4-without-secure-messaging branch)
 - Binary name: `SmartPGPApplet-default.cap` and `SmartPGPApplet-large.cap`
-- Download: https://github.com/StarGate01/flexsecure-applets/releases
+- Download: https://github.com/DangerousThings/flexsecure-applets/releases
 - AID: `d2:76:00:01:24:01:03:04:00:0A:00:00:00:00:00:00` (has to be adjusted, see below), Package: `d2:76:00:01:24:01`
 - Storage requirements:
   - Persistent: `24776` bytes (`28148` with one RSA 2048 key)
@@ -31,7 +31,7 @@ If you want to use RSA keys larger than 2048 bits, you have to change the consta
 
 Otherwise, gpg might fail with a message like `gpg: KEYTOCARD failed: Hardware problem`.
 
-You might also want to use my Docker image and build environment, which contains all necessary packages for compilation and testing: https://github.com/StarGate01/flexsecure-applets . This environment automatically builds both the default and large configuration.
+You might also want to use my Docker image and build environment, which contains all necessary packages for compilation and testing: https://github.com/DangerousThings/flexsecure-applets . This environment automatically builds both the default and large configuration.
 
 For more options, see the SmartPGP README file.
 
@@ -82,4 +82,4 @@ Generating keys on the card itself can be done for any algorithm without having
 - https://gnupg.org/ftp/specs/OpenPGP-smart-card-application-3.4.pdf
 - https://www.gpg4win.org/
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/applets/2-totp-hotp.md b/docs/applets/2-totp-hotp.md
@@ -8,7 +8,7 @@ These codes are preferred over e.g. SMS codes, because the process requires no c
 
 - Repository: https://github.com/StarGate01/Flex-OTP (which is a fork of https://github.com/VivoKey/Flex-OTP. The fork impersonates a Yubikey.)
 - Binary name: `vivokey-otp.cap`
-- Download: https://github.com/StarGate01/flexsecure-applets/releases
+- Download: https://github.com/DangerousThings/flexsecure-applets/releases
 - AID: `A0:00:00:05:27:21:01:01`, Package: `A0:00:00:05:27:21:01`
 - Storage requirements:
   - Persistent: `5128` bytes (`6020` with three TOTP accounts)
@@ -65,4 +65,4 @@ This URI string is the same as is encoded in the usual QR codes.
 - https://stefansundin.github.io/2fa-qr/
 - https://developers.yubico.com/yubikey-manager/
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/applets/3-hmac-sha1.md b/docs/applets/3-hmac-sha1.md
@@ -6,9 +6,9 @@ This applet is compatible to the Yubikey-style protocol, supported by e.g. KeePa
 
 ## Applet Information
 
-- Repository: https://github.com/StarGate01/vk-ykhmac (which is a fork of https://github.com/arekinath/YkOtpApplet. The fork fixes some bugs.). There is also a version by Vivokey at https://github.com/VivoKey/apex-ykhmac , which is forked from StarGate01 but distributed via Fidesmo.
+- Repository: https://github.com/DangerousThings/flexsecure-ykhmac (which is a fork of https://github.com/arekinath/YkOtpApplet. The fork fixes some bugs.).
 - Binary name: `YkHMACApplet.cap`
-- Download: https://github.com/StarGate01/flexsecure-applets/releases
+- Download: https://github.com/DangerousThings/flexsecure-applets/releases
 - AID: `A0:00:00:05:27:20:01`, Package: `A0:00:00:05:27:20`
 - Storage requirements:
   - Persistent: `3204` bytes
@@ -58,7 +58,7 @@ ykman -r 'READER' otp chalresp -f 1 SECRET
 
 Use the `-f` flag to specify the slot (1 or 2).
 
-You can also use the `yktool.jar` utility (Download from https://github.com/StarGate01/flexsecure-applets/releases/). Take care of the string encoding on your operating system, this command is for Linux:
+You can also use the `yktool.jar` utility (Download from https://github.com/DangerousThings/flexsecure-applets/releases/). Take care of the string encoding on your operating system, this command is for Linux:
 
 ```
 echo SECRET | java -jar yktool.jar program hmac 1 -x -X
@@ -97,7 +97,7 @@ The `ykdroid` Android library implements this protocol, and provides it to apps
 - https://keepassxc.org/
 - https://en.wikipedia.org/wiki/HMAC
 - https://chrz.de/2021/12/22/nfc-hacking-part-1-authentication-systems-security/
-- https://github.com/StarGate01/vk-ykhmac
+- https://github.com/DangerousThings/flexsecure-ykhmac
 - https://github.com/arekinath/yktool
 - http://www.average.org/chal-resp-auth/
 - https://crypto.stackexchange.com/questions/26510/why-is-hmac-sha1-still-considered-secure
@@ -108,4 +108,4 @@ The `ykdroid` Android library implements this protocol, and provides it to apps
 - https://play.google.com/store/apps/details?id=keepass2android.keepass2android_nonet
 - https://play.google.com/store/apps/details?id=net.pp3345.ykdroid
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/applets/4-ndef.md b/docs/applets/4-ndef.md
@@ -6,7 +6,7 @@ NDEF (NFC Data Exchange Format) is a data format used to store structured data.
 
 - Repository: https://github.com/OpenJavaCard/openjavacard-ndef
 - Binary name: `openjavacard-ndef-full.cap` and `openjavacard-ndef-tiny.cap`
-- Download: https://github.com/StarGate01/flexsecure-applets/releases
+- Download: https://github.com/DangerousThings/flexsecure-applets/releases
 - AID: `D2:76:00:00:85:01:01`, Package: `D2:76:00:00:85`
 - Storage requirements:
   - Persistent: `4372` bytes
@@ -90,4 +90,4 @@ python3 pcsc_ndef.py -r "READER" -t 4 read
 - https://ndeflib.readthedocs.io/en/latest
 - https://play.google.com/store/apps/details?id=com.wakdev.nfctools.pro
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/docs/applets/5-fido.md b/docs/applets/5-fido.md
@@ -18,7 +18,7 @@ You can however already test the FIDO2 applet.
 
 - Repository: https://github.com/darconeous/u2f-javacard
 - Binary name: `U2FApplet.cap`
-- Download: https://github.com/StarGate01/flexsecure-applets/releases
+- Download: https://github.com/DangerousThings/flexsecure-applets/releases
 - AID: `a0:00:00:06:47:2F:00:01:01`, Package: `a0:00:00:06:47:2F:00:01`
 - Storage requirements:
   - Persistent: `8020` bytes
@@ -27,9 +27,9 @@ You can however already test the FIDO2 applet.
 
 ### FIDO2 CTAP2 (in development)
 
-- Repository: https://github.com/VivoKey/vk-u2f (forked from u2f-javacard)
+- Repository: https://github.com/VivoKey/apex-fido2-ctap (forked from u2f-javacard)
 - Binary name: `CTAP2.cap`
-- Download: https://github.com/StarGate01/flexsecure-applets/releases
+- Download: https://github.com/DangerousThings/flexsecure-applets/releases
 - AID: `a0:00:00:06:47:2F:00:01:01`, Package: `a0:00:00:06:47:2F:00:01`
 - Storage requirements:
   - Persistent: `13520` bytes
@@ -54,7 +54,7 @@ You can also generate your own attestation certificate. This makes your token un
 
 In the future, Vivokey plans offer signed certificates using their own certificate authority in some way. It is unclear if or how these would be coming to the FlexSecure, as they require the more protected environment of the Apex Flex in order to not leak.
 
-Creating certificates used to be quite the involved task requiring advanced knowledge of `openssl` commands, but I have written a small tool to simplify the process. Install Python3, and the `cryptography`, `asn1`, and `pyscard` modules (e.g. using Pip). Then, clone or download https://github.com/StarGate01/fido-attestation-loader .
+Creating certificates used to be quite the involved task requiring advanced knowledge of `openssl` commands, but I have written a small tool to simplify the process. Install Python3, and the `cryptography`, `asn1`, and `pyscard` modules (e.g. using Pip). Then, clone or download https://github.com/DangerousThings/fido-attestation-loader .
 
 If you specify no flags, the script will use the default file names `attestation.der`, `attestation_key.p8`, `ca.der`, `ca_key.p8`, and `settings.ini`. If you want to, you can edit the metadata in `settings.ini`, also refer to the Readme file.
 
@@ -82,7 +82,7 @@ For FIDO2 (default):
 ./attestation.py cert show -m fido2
 ```
 
-The attestation script has a lot more flags to control which files to use, and to provide passphrases via the arguments instead of interactively typing them. It also provides functionality to validate a certificate gainst an certificate authority. See the `-h` help command for more details, or refer to the Readme file of https://github.com/StarGate01/fido-attestation-loader .
+The attestation script has a lot more flags to control which files to use, and to provide passphrases via the arguments instead of interactively typing them. It also provides functionality to validate a certificate gainst an certificate authority. See the `-h` help command for more details, or refer to the Readme file of https://github.com/DangerousThings/fido-attestation-loader .
 
 Use GlobalPlatformPro (GPP) from https://github.com/martinpaljak/GlobalPlatformPro/releases to install the applet, for Fido U2F:
 
@@ -155,6 +155,6 @@ On Android, you can use the *FIDO / Webauthn Example* App at https://play.google
 - https://research.kudelskisecurity.com/2020/02/12/fido2-deep-dive-attestations-trust-model-and-security/
 - https://developers.yubico.com/U2F/Attestation_and_Metadata/
 - https://fidoalliance.org/specs/fido-u2f-v1.2-ps-20170411/fido-u2f-authenticator-transports-extension-v1.2-ps-20170411.html#fido-u2f-certificate-extensions
-- https://github.com/StarGate01/fido-attestation-loader
+- https://github.com/DangerousThings/fido-attestation-loader
 
-Improve this document: https://github.com/StarGate01/flexsecure-applets/tree/master/docs
+Improve this document: https://github.com/DangerousThings/flexsecure-applets/tree/master/docs
diff --git a/smartcard-ci b/smartcard-ci
@@ -1 +1 @@
-Subproject commit 05b4704f5ee20f9e73c5ce72e0babb7e2cf0fb47
+Subproject commit 3fd27e54404486d6c2cf4a269bb6b1f383b8dfe4
