INNER CODE UNIT · Go

PINPolicy

go-piv/piv-go · v2/piv/key.go:497

	PINPolicyNever PINPolicy = iota + 1
	PINPolicyOnce
	PINPolicyAlways
	// PINPolicyMatchOnce and PINPolicyMatchAlways require biometric user
	// verification (YubiKey Bio). The naming convention of these policies aligns
	// with yubico-piv-tool.
	//
	// The library handles biometric verification transparently:
	//   - MatchOnce: VerifyBiometrics is performed on demand, then the operation
	//     is retried once.
	//   - MatchAlways: VerifyBiometrics is performed before every operation.
	//
	// See https://docs.yubico.com/yesdk/users-manual/application-piv/pin-touch-policies.html
	PINPolicyMatchOnce
	PINPolicyMatchAlways
)

// TouchPolicy represents proof-of-presence requirements when signing or

View source record →