Hello Naram,
I am interested in the PKI part of your project. My search for available
Linux implementations of PKIs has revealed:
1. manual use of OpenSSL (look at modssl.org WWW site, at the FAQ)
2. pyCA (from Python WWW site, search pyCA at "Mountain of Parnassus"
search engine)
3. OpenCA (www.openca.org)
4. Oscar (DTSC implementation, australia - free for non-commercial purposes)
www.dtsc.qut.edu.au (If I recollect correctly)
5. Netscape PKI libraries (no crypto inside yet, cannot compile).
You will find big problems with getting smart cards with real crypto.
The problem is the difficulty of putting RSA into the card (only new cards
support it well) and of course the export restrictions. In your case, you
could
contact directly the smart card manufacturer and discuss your project with
them. You could start with Gemplus.
For the SDK, you will need some $$$ (err french francs)
Since it's an MSc project, the full work to implement smart card + PKI in
a real environment will take longer than six months. I would recommend
you to cut down the project, focus on working with the PAM support of Linux
and for the PKI support, just generate the keys with command-line openssl
and implement a one-level PKI (no hierarchy, no mesh, as it's used on the
Internet).
Simos Xenitellis
> ----------
> From: Naram El Abid[SMTP:[EMAIL PROTECTED]]
> Reply To: [EMAIL PROTECTED]
> Sent: 11 June 2000 14:52
> To: [EMAIL PROTECTED]
> Subject: MUSCLE smart card+PKI
>
> Hi,
> I am a master student of computer network.
> I am working on a project concerned with the deployment of PKI with smart
> card in order to authenticate access to computing facilities in my
> university campus.
> I intend to do it with linux, and I'll be very grateful if you can help on
> what concerns: the most
> adequate smart cards, card reader and documentation.
> P.S: i am from Morocco (for exportation restrictions)
>
> Naram El Adib.
>
> ***************************************************************
> Linux Smart Card Developers - M.U.S.C.L.E.
> (Movement for the Use of Smart Cards in a Linux Environment)
> http://www.linuxnet.com/smartcard/index.html
> ***************************************************************
>
***************************************************************
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***************************************************************
