Re: New GPLv3 OpenPGP card implementation (on a java card).

2013-10-16 Thread Pete Stephenson
On Wed, Oct 16, 2013 at 11:40 AM, Werner Koch wrote: > On Tue, 15 Oct 2013 11:41, p...@heypete.com said: > >> Also, are there any smartcards out there that would support DSA/ELG >> keys? All the cards I've seen and used support RSA only. > > You don't want DSA on smartcards - at least not until th

Re: New GPLv3 OpenPGP card implementation (on a java card).

2013-10-16 Thread Werner Koch
On Tue, 15 Oct 2013 11:41, p...@heypete.com said: > Also, are there any smartcards out there that would support DSA/ELG > keys? All the cards I've seen and used support RSA only. You don't want DSA on smartcards - at least not until they are able to do deterministic DSA (rfc-6979). ECC on smartc

Re: New GPLv3 OpenPGP card implementation (on a java card).

2013-10-15 Thread NdK
Il 15/10/2013 11:41, Pete Stephenson ha scritto: > On Tue, Oct 15, 2013 at 7:42 AM, Ann O'nymous wrote: >> If anyone is interested I wrote a java card implementation of the OpenPGP >> card and released it under the GPLv3 I'm 'more or less' (no time ATM :( ) working on extending standard GPG card p

Re: New GPLv3 OpenPGP card implementation (on a java card).

2013-10-15 Thread Pete Stephenson
On Tue, Oct 15, 2013 at 7:42 AM, Ann O'nymous wrote: > If anyone is interested I wrote a java card implementation of the OpenPGP > card and released it under the GPLv3 Excellent! > Features and limitations: > - 2048 bit RSA keys only Is this a hardware limitation, or could it be increased in th

New GPLv3 OpenPGP card implementation (on a java card).

2013-10-14 Thread Ann O'nymous
If anyone is interested I wrote a java card implementation of the OpenPGP card and released it under the GPLv3 Features and limitations: - 2048 bit RSA keys only - On card key generation - RSA keys can be imported onto the card (if using GnuPG v2.0.22 or above, previous versions did not support wr

Re: OpenPGP Card implementation

2006-11-18 Thread Benjamin Donnachie
Peter Lebbing wrote: > Perhaps this is more a discussion for gnupg-devel or even not a gnupg > mailing list at all? I've set up a separate mailing list - open-openpgp-card. See http://www.py-soft.co.uk/mailman/listinfo/open-openpgp-card to join. > I have a question regarding the current OpenPGP

Re: Re: OpenPGP Card implementation

2006-11-18 Thread Peter Lebbing
Perhaps this is more a discussion for gnupg-devel or even not a gnupg mailing list at all? I have a question regarding the current OpenPGP Card for Werner: does it blind RSA calculations? If not, is there a different firewall against using power analysis to obtain the secret key? Benjamin Donnach

Re: OpenPGP Card implementation

2006-11-17 Thread Janusz A. Urbanowicz
On Fri, Nov 17, 2006 at 02:17:50AM +0100, Johan Wevers wrote: > Janusz A. Urbanowicz wrote: > > >Do you mean that if I did get some VC funding for design of open > >crypto smartcard targeted for OpenPGP use and then published it (as a > >part of the business plan) I would get sued? > > Then publi

Re: OpenPGP Card implementation

2006-11-16 Thread Robert J. Hansen
The first bit of this is to Janusz; the second is to Johan. Janusz A. Urbanowicz wrote: > Do you mean that if I did get some VC funding for design of open > crypto smartcard targeted for OpenPGP use and then published it (as a > part of the business plan) I would get sued? You're asking computer

Re: OpenPGP Card implementation

2006-11-16 Thread Johan Wevers
Janusz A. Urbanowicz wrote: >Do you mean that if I did get some VC funding for design of open >crypto smartcard targeted for OpenPGP use and then published it (as a >part of the business plan) I would get sued? Then publish it anonymously. Most TV card hack software is also published anonymously,

Re: OpenPGP Card implementation

2006-11-16 Thread Benjamin Donnachie
Benjamin Donnachie wrote: > Now these are promising - > http://www.weethet.nl/english/smartcards_types.php#funcard ... and so it SOSSE - Simple Operating System for Smartcard Education[1] Anyone interested in helping develop a truly open implementation of the OpenPGP smartcard on an AVR funcard (

Re: OpenPGP Card implementation

2006-11-15 Thread Benjamin Donnachie
Now these are promising - http://www.weethet.nl/english/smartcards_types.php#funcard Need to crash into bed... I'll look at them in more detail later... Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnu

Re: OpenPGP Card implementation

2006-11-15 Thread Benjamin Donnachie
Benjamin Donnachie wrote: > Ah-ha! Amtel are apparently offering samples of their > AT91SC512384RCT[1], which has an impressive set of features including a > cryptographic accelerator... Alternatively, this link raises some interesting possibilities - http://www.elecdesign.com/Articles/Index.cfm?

Re: OpenPGP Card implementation

2006-11-15 Thread Benjamin Donnachie
Benjamin Donnachie wrote: > Can you point me in their direction please? I'd much rather try to > implement RSA from scratch in Java than Basic! Ah-ha! Amtel are apparently offering samples of their AT91SC512384RCT[1], which has an impressive set of features including a cryptographic accelerator.

Re: OpenPGP Card implementation

2006-11-15 Thread Werner Koch
On Wed, 15 Nov 2006 12:13, [EMAIL PROTECTED] said: > Do you mean that if I did get some VC funding for design of open > crypto smartcard targeted for OpenPGP use and then published it (as a > part of the business plan) I would get sued? Only if that card may be used to create clones of TV cards.

Re: OpenPGP Card implementation

2006-11-15 Thread Janusz A. Urbanowicz
On Tue, Nov 14, 2006 at 05:49:00PM +0100, Werner Koch wrote: > On Tue, 14 Nov 2006 13:06, [EMAIL PROTECTED] said: > > > Is it very hard to design such a card from scratch, and very expensive > > to have it produced as custom hardware? I'm sure there are enough > > chip-producing companies in China

Re: OpenPGP Card implementation

2006-11-15 Thread Johan Wevers
Werner Koch wrote: >Good for people in China, but here they will go after you as soon as >you sell them. Recall that we are not yet ready to FTP hardware. Mail-order from a company in Tadjikistan, who gets them from a front-end company in Hong Kong who orders them somewhere in mainland China. Go

Re: OpenPGP Card implementation

2006-11-14 Thread Werner Koch
On Tue, 14 Nov 2006 13:30, [EMAIL PROTECTED] said: > I did some investigation, and there are lots of java card platforms that > would be eminently usable for the OpenPGP smartcard. The hard part is > redoing the code from BasicCard to Java. The hardware is easy to obtain. The cards are pretty e

Re: OpenPGP Card implementation

2006-11-14 Thread Werner Koch
On Tue, 14 Nov 2006 13:06, [EMAIL PROTECTED] said: > Is it very hard to design such a card from scratch, and very expensive > to have it produced as custom hardware? I'm sure there are enough > chip-producing companies in China who don't give a damn about western > lawyers. Good for people in Chi

Re: OpenPGP Card implementation

2006-11-14 Thread Benjamin Donnachie
Kurt Fitzner wrote: > I did some investigation, and there are lots of java card platforms that > would be eminently usable for the OpenPGP smartcard. The hard part is > redoing the code from BasicCard to Java. The hardware is easy to obtain. Can you point me in their direction please? I'd much

Re: OpenPGP Card implementation

2006-11-14 Thread Kurt Fitzner
Johan Wevers wrote: > Werner Koch wrote: > >> Thanks to the pay-tv's lawyers and the tv card crackers the problems >> on selling certain crypto cards exists. The rumour goes that they >> blackmail the chip vendors (like Atmel) to stop processing chips which >> are too easy to be used by tv card c

Re: OpenPGP Card implementation

2006-11-14 Thread Johan Wevers
Werner Koch wrote: >Thanks to the pay-tv's lawyers and the tv card crackers the problems >on selling certain crypto cards exists. The rumour goes that they >blackmail the chip vendors (like Atmel) to stop processing chips which >are too easy to be used by tv card crackers. I call that "security >

Re: OpenPGP Card implementation

2006-11-13 Thread Ismael Valladolid Torres
Werner Koch escribe: > On Mon, 13 Nov 2006 11:46, [EMAIL PROTECTED] said: > > > Usually microcontroller manufacturers (Atmel, Infineon, Samsung...) do > > include hardware based RNG in their chips, don't they? > > You want a chip with a hardware accelerator for RSA. RNG's are not the > problem.

Re: OpenPGP Card implementation

2006-11-13 Thread Werner Koch
On Sat, 11 Nov 2006 19:51, [EMAIL PROTECTED] said: > It struck me as ironic that OpenPGP isn't that open! I started work on OpenPGP is define by RFC2440 and as "open" as any RFC. The OpenPGP card Speification by Achim Pietig and me is very similar to an RFC. > an open implementation on a Basic

Re: OpenPGP Card implementation

2006-11-13 Thread Werner Koch
On Mon, 13 Nov 2006 11:46, [EMAIL PROTECTED] said: > Usually microcontroller manufacturers (Atmel, Infineon, Samsung...) do > include hardware based RNG in their chips, don't they? You want a chip with a hardware accelerator for RSA. RNG's are not the problem. Salam-Shalom, Werner __

Re: OpenPGP Card implementation

2006-11-13 Thread Benjamin Donnachie
Peter Lebbing wrote: > I got interested as well and though I understand it, I also see a lot of > added value in a true Open Source implementation. Replied off list. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: OpenPGP Card implementation

2006-11-13 Thread Ismael Valladolid Torres
Peter Lebbing escribe: > I got interested as well and though I understand it, I also see a lot of > added value in a true Open Source implementation. I'm looking into > implementing it on a general processor microcontroller, I have > experience with microcontroller programming. The main problem I s

Re: OpenPGP Card implementation

2006-11-12 Thread Peter Lebbing
Benjamin Donnachie wrote: > It struck me as ironic that OpenPGP isn't that open! I started work on > an open implementation on a BasicCard but, due to licensing > restrictions, I am unable to get a card with RSA card built in and > implementing RSA using the binary left to right method in Basic wi

Re: OpenPGP Card implementation

2006-11-11 Thread Benjamin Donnachie
Peter Lebbing wrote: > Is the implementation of the current OpenPGP Card open source? If so, > how can I obtain the source? It struck me as ironic that OpenPGP isn't that open! I started work on an open implementation on a BasicCard but, due to licensing restrictions, I am unable to get a card wi

Re: OpenPGP Card implementation

2006-10-16 Thread Werner Koch
On Mon, 16 Oct 2006 17:56, Peter Lebbing said: > Is the implementation of the current OpenPGP Card open source? If so, > how can I obtain the source? Sorry, that is not possible due to the strict NDAs you have to sign with the chip vendors. Unless we can impleemnt it on a free and reasonable pri

OpenPGP Card implementation

2006-10-16 Thread Peter Lebbing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is the implementation of the current OpenPGP Card open source? If so, how can I obtain the source? I'm just interested in seeing how it is done, I don't plan to use it for any practical purposes. Thanks, Peter Lebbing. -BEGIN PGP SIGNATURE-