setup-signing-key/setup-test-key currently always target the SIGNATURE slot (9c) and require a full factory reset. A single physical YubiKey should be able to hold independent keys for multiple taf roles (e.g. root in 9c, targets in 9a) instead of needing one device per role.
- Add --slot to setup-signing-key/setup-test-key (SIGNATURE, AUTHENTICATION, KEY_MANAGEMENT, CARD_AUTH)
- Add list-slots to show free/occupied status per slot
- sign_piv_rsa_pkcs1v15 hardcodes SLOT.SIGNATURE in the actual ctrl.sign(...) call
- YkSigner has no notion of which slot its key lives in
setup-signing-key/setup-test-keycurrently always target the SIGNATURE slot (9c) and require a full factory reset. A single physical YubiKey should be able to hold independent keys for multiple taf roles (e.g. root in 9c, targets in 9a) instead of needing one device per role.