Simon recently updated the rust-openpgp-card package
to 0.7 (I had planned to update it, but only to version 0.6).

I was able to make a patch that builds and runs tests
succesfully, but I am not happy uploading it without review
from someone more familiar with the code, and ideally
someone who actually uses openpgp cards.

The patch addresses the following issues.

The signature of the "signature_for_hash" and
"authenticate_for_hash" method has changed, previously
they took a paramer of type "Hash", while now they take
two parameters of type "SigningAlgo" and "&[u8]", I've
tried to translate things as best I can but there seem to
be some differences, for example the old "Hash" type
had different variants for ECDSA and EdDSA while the
new "SigningAlgo" type just has a single variant for ECC

The to_admin_card function has been renamed to
as_admin_card

Many parameters and return values have changed from Box
or Vec to references. This required me to restructure the SqEccKey
type to perform private key conversion in SqEccKey::new
rather than in the implementation of the EccKey trait. It also
raises some potential questions about cleanup of private
data before freeing memory, I don't know what sequoia's
policy is on that.

I have brought this up upstream at

We believe that the bug you reported is fixed in the latest version of
rust-sequoia-keystore-openpgp-card, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1145885@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Holger Levsen <holger@debian.org> (supplier of updated rust-sequoia-keystore-openpgp-card package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 02 Oct 2026 13:23:30 +0200
Source: rust-sequoia-keystore-openpgp-card
Architecture: source
Version: 0.2.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed-By: Holger Levsen <holger@debian.org>
Closes: 1145885
Changes:
 rust-sequoia-keystore-openpgp-card (0.2.2-1) unstable; urgency=medium
 .
   * Package sequoia-keystore-openpgp-card 0.2.2 from crates.io using debcargo 2.8.4
     - Closes: #1145885.
     - refresh relax-deps.patch.
Checksums-Sha1:
 246d0394cc03da8844a94593da68bb11ca0428c0 3504 rust-sequoia-keystore-openpgp-card_0.2.2-1.dsc
 6d20d303c67cb1a6f9c27169231cdf833bed49dd 43008 rust-sequoia-keystore-openpgp-card_0.2.2.orig.tar.gz
 c07d9f871d1368b8163ebe9dcd1360e69101b50b 3676 rust-sequoia-keystore-openpgp-card_0.2.2-1.debian.tar.xz
 da02ff7c2efbf76146043e137971ed8ce8fad446 7857 rust-sequoia-keystore-openpgp-card_0.2.2-1_source.buildinfo
Checksums-Sha256:
 ab9fd0dd7962b8d91e63f8f6a66e4a19887a80c8c80b0ac24176ea1fd04be4de 3504 rust-sequoia-keystore-openpgp-card_0.2.2-1.dsc
 06bf2925ec5705854da16fb7916a67b8a20772495cd10a42d6b758942258d137 43008 rust-sequoia-keystore-openpgp-card_0.2.2.orig.tar.gz
 2bb25e6fcbea6b29a2acf577849aa18319631a50f0fe6a0382e16ab7c62091ee 3676 rust-sequoia-keystore-openpgp-card_0.2.2-1.debian.tar.xz
 1f41cc3b1323089d6835853927778ed2b41b5128fa4ad4ded80fe8a63d3fcc41 7857 rust-sequoia-keystore-openpgp-card_0.2.2-1_source.buildinfo
Files:
 f5e18da4416878d1d1c00ee4cceb63db 3504 rust optional rust-sequoia-keystore-openpgp-card_0.2.2-1.dsc
 c12e57da34b1f65f046143c61a699b22 43008 rust optional rust-sequoia-keystore-openpgp-card_0.2.2.orig.tar.gz
 8126c90c0f3fbd0c8717023786266a71 3676 rust optional rust-sequoia-keystore-openpgp-card_0.2.2-1.debian.tar.xz
 1b6f88c7fcc2b5d7d5bc3769bb68793d 7857 rust optional rust-sequoia-keystore-openpgp-card_0.2.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmq/lDsSHGhvbGdlckBk
ZWJpYW4ub3JnAAoJEAkauFYGmqocd6IQAIudFroNPgpkkjvNhDn/KRvL9UNOuCKT
+NZoVTdXs7oqNDYGn/jJkuvk7YFwMC6962uVffVSqBNe8yPWUur14vAL4IQMLU7X
oX4AMQ/rvwvbMoao/iDy/APafXksiuSQ3CvYh6YuhVWOu+2lOvNzy0QyYBNA7Zws
gLWcMHpa1+4gdZnTe3iwdK3BISV/NsLfIbO85+1Tf2PDcbjRb/Q93GpGbWl+70vw
I7ElAGHoOYNXC9bEfbFqBX4Fn9wnTGv/l7IpHkN3YgCyob09NA08QL6eYql6dYSt
za3jgnVXBTYC4u1B338WMximlfCXl5TnwMHPb/qk2jdE3sYvYHEz3rzGy6X8uDL2
+UO0wC3MAZ+g4aUGzWtPkeHTBJhOv5XhMo4g5Mc4LjIB53d/IpZn8BEhxjp/UT5M
NCNbqk8aFbzdj9j1uTAUHUdKvkCrElFaQk9V/ONBv4fChzVf/ksxoasBxGMqo1sZ
FIezPaPgABTHgjn/rihJQUtXX6xwM/rVKMAzIX/nvxz9qkBTNEvvo/JdjG2H07/V
7rxh1vTPKcTuraoiU467f7B2bnb5Xm3INyiuqjbhipuWrYh8IKRTf7eriosuLvLo
RVIwqzfBb9GWqfmQyMrpV2Jt0wAxTpoN1dqNiMH54hp0Fnv7VFuiC+wULYfx5s8b
KouHEZ5KjbbT
=+mHC
-----END PGP SIGNATURE-----