On Fri, Jun 22, 2001 at 10:00:35PM +0200, Patrick Valsecchi wrote:
> The user will be able to change the code, that's not the matter, but it wont be
> able to run it on my customer's hardware. That's the point. And I don't this it
> goes against any law neither any license.
>
> I'm sure it does
he details on it. I've
> checked AMEXs website an found nothing.. Does anyone know or know where I
> could find such information? Thanks in advance..
It's a GemPlus GCR415.
I've gotten it to work with some GemPlus
software by configuring it as a GCR410.
--
Eric Mur
es of specs.
I beleive that the T= stuff is in 7816-3 or possibly 7816-4.
If you're doing anything with smartcards you'll need both.
They're normally available only by purchasing them from ISO
but a web search might find a copy.
--
Eric Murray Consulting Security Archit
Hi. One of my clients needs a PKCS#11 library written.
I gave them an estimate but some other work came up and
I don't have the time to do the work. If you've got
PKCS#11 experience, and preferably are in the SF bay area, drop
me a line.
--
Eric Murray http://www.lne.com/ericm
7;s a good interface to
a smartcard & reader.
--
Eric Murray http://www.lne.com/ericm ericm at lne.com PGP keyid:E03F65E5
Consulting Security Architect
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the
On Sat, May 27, 2000 at 09:49:16AM -0700, Eric Murray wrote:
> I wrote a paper on a design for such a secure reader:
> http://slack.lne.com/ericm/nable-threat-model.html
oops, that should be
http://www.lne.com/ericm/nable-threat-model.html
--
Eric Murray www.lne.com/~ericm ericm at th
ready
lost when the attacker can put the card snooping s/w on your host.
This is not true of say a banking application.
--
Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5
***
Linux Smart Card Developers - M.U
You might need the card reader for something else.
You might walk away and leave the card in the reader.
If you're running *inux, you might leave your login session going
for days (or months like me).
--
Eric Murray www.lne.c
t Gemplus GPK series cards can generate RSA keys.
--
Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environmen
supports PC/SC and also
a couple extra PC/SC commands to do secure PIN entry on the PIN-pad
or keyboard.
--
Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5
***
Linux Smart Card Developers - M.U.S.C.L.E.
(M
ps's Crypto Law Survey web page is the place to
go to monitor crypto laws- he keeps it up to date.
http://cwis.kub.nl/~frw/people/koops/lawsurvy.htm
--
Eric Murray www.lne.com/ericm ericm at the site lne.com PGP keyid:E03F65E5
***
upports Windows but since my windows
box is tied up doing development for the Compaq secure smartcad
keyboard I thought I'd try the GCR on Linux...
--
Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5
in software that is loaded by the user
I think that the cards do have some h/w crypto. Doing
bigmath routines in Java on a smartcard would take a really long time.
--
Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5
*
7;t
break the security model. I.e. the host is in a steel box
with only a network connection and smartcard slot to communicate
with the outside world. Problem is, this isn't very useful (and
someone could still break in via the net connection).
Or you can apply the usual software protection
ation between the
> reader and the card?
That's no help. The secret would still be on the (untrusted) host
for the ssh authentication.
--
Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5
***
Lin
EMV and PKCS#15.
--
Eric Murray N*Able Technologieswww.nabletech.com
(email: ericm at the sites lne.com or nabletech.com) PGP keyid:E03F65E5
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for t
On Wed, Jul 21, 1999 at 07:20:05AM +, Atle Sandvold wrote:
> Eric Murray wrote:
> >
> > On Tue, Jul 20, 1999 at 02:23:39PM +, Atle Sandvold wrote:
> > > Hi!
> > >
> > > Does anyone know about a smart card which contains public key
> > &g
ypto part of their
> "GemXpresso 210 PK" didn't work unless you had a developer kit(which
> didn't actually exist).
>
> Can anyone help me here?
What about other Gemplus cards like the GPK4000?
That card has a 1024-bit RSA engine.
--
Eric Murray N*Able Techno
rrect number of bytes. That's
how it tells which hash you're feeding it.
Also, are you sure that you're using the same PKCS#1? The GPK
uses v1.5 but there is a new v2.0 standard out since last summer, which
is very different and is based on the OAEP padding scheme to prevent
adapt
Does anyone have code that implements the 3DES authentication that's
used on GPK4000 cards?
--
Eric Murray Chief Security Scientist N*Able Technologies www.nabletech.com
(email: ericm at lne.com or nabletech.com) PGP keyid:E03
20 matches
Mail list logo