Re: MUSCLE Disk encryption and more

2001-06-22 Thread Eric Murray
On Fri, Jun 22, 2001 at 10:00:35PM +0200, Patrick Valsecchi wrote: > The user will be able to change the code, that's not the matter, but it wont be > able to run it on my customer's hardware. That's the point. And I don't this it > goes against any law neither any license. > > I'm sure it does

Re: MUSCLE AMEX Blue Reader..

2001-02-05 Thread Eric Murray
he details on it. I've > checked AMEXs website an found nothing.. Does anyone know or know where I > could find such information? Thanks in advance.. It's a GemPlus GCR415. I've gotten it to work with some GemPlus software by configuring it as a GCR410. -- Eric Mur

Re: MUSCLE Protocal Specs..

2001-01-30 Thread Eric Murray
es of specs. I beleive that the T= stuff is in 7816-3 or possibly 7816-4. If you're doing anything with smartcards you'll need both. They're normally available only by purchasing them from ISO but a web search might find a copy. -- Eric Murray Consulting Security Archit

MUSCLE PKCS#11 expertise?

2000-10-06 Thread Eric Murray
Hi. One of my clients needs a PKCS#11 library written. I gave them an estimate but some other work came up and I don't have the time to do the work. If you've got PKCS#11 experience, and preferably are in the SF bay area, drop me a line. -- Eric Murray http://www.lne.com/ericm

Re: MUSCLE Getting Netscape and smartcards to play together

2000-09-11 Thread Eric Murray
7;s a good interface to a smartcard & reader. -- Eric Murray http://www.lne.com/ericm ericm at lne.com PGP keyid:E03F65E5 Consulting Security Architect *** Linux Smart Card Developers - M.U.S.C.L.E. (Movement for the

Re: MUSCLE

2000-05-27 Thread Eric Murray
On Sat, May 27, 2000 at 09:49:16AM -0700, Eric Murray wrote: > I wrote a paper on a design for such a secure reader: > http://slack.lne.com/ericm/nable-threat-model.html oops, that should be http://www.lne.com/ericm/nable-threat-model.html -- Eric Murray www.lne.com/~ericm ericm at th

Re: MUSCLE

2000-05-27 Thread Eric Murray
ready lost when the attacker can put the card snooping s/w on your host. This is not true of say a banking application. -- Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5 *** Linux Smart Card Developers - M.U

Re: MUSCLE

2000-05-27 Thread Eric Murray
You might need the card reader for something else. You might walk away and leave the card in the reader. If you're running *inux, you might leave your login session going for days (or months like me). -- Eric Murray www.lne.c

Re: MUSCLE information

2000-03-03 Thread Eric Murray
t Gemplus GPK series cards can generate RSA keys. -- Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5 *** Linux Smart Card Developers - M.U.S.C.L.E. (Movement for the Use of Smart Cards in a Linux Environmen

Re: MUSCLE PIN pad readers?

2000-02-22 Thread Eric Murray
supports PC/SC and also a couple extra PC/SC commands to do secure PIN entry on the PIN-pad or keyboard. -- Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5 *** Linux Smart Card Developers - M.U.S.C.L.E. (M

Re: MUSCLE Export Restrictions

2000-01-01 Thread Eric Murray
ps's Crypto Law Survey web page is the place to go to monitor crypto laws- he keeps it up to date. http://cwis.kub.nl/~frw/people/koops/lawsurvy.htm -- Eric Murray www.lne.com/ericm ericm at the site lne.com PGP keyid:E03F65E5 ***

MUSCLE GCR 415 support?

1999-12-22 Thread Eric Murray
upports Windows but since my windows box is tied up doing development for the Compaq secure smartcad keyboard I thought I'd try the GCR on Linux... -- Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5

Re: MUSCLE Can I distinguish real SC hardware from an emulator?

1999-09-03 Thread Eric Murray
in software that is loaded by the user I think that the cards do have some h/w crypto. Doing bigmath routines in Java on a smartcard would take a really long time. -- Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5 *

Re: MUSCLE Can I distinguish real SC hardware from an emulator?

1999-09-03 Thread Eric Murray
7;t break the security model. I.e. the host is in a steel box with only a network connection and smartcard slot to communicate with the outside world. Problem is, this isn't very useful (and someone could still break in via the net connection). Or you can apply the usual software protection

Re: MUSCLE SSH and Smartcards?

1999-08-16 Thread Eric Murray
ation between the > reader and the card? That's no help. The secret would still be on the (untrusted) host for the ssh authentication. -- Eric Murray www.lne.com/~ericm ericm at the site lne.com PGP keyid:E03F65E5 *** Lin

Re: MUSCLE Standard Attributes

1999-08-02 Thread Eric Murray
EMV and PKCS#15. -- Eric Murray N*Able Technologieswww.nabletech.com (email: ericm at the sites lne.com or nabletech.com) PGP keyid:E03F65E5 *** Linux Smart Card Developers - M.U.S.C.L.E. (Movement for t

Re: MUSCLE Crypto card

1999-07-21 Thread Eric Murray
On Wed, Jul 21, 1999 at 07:20:05AM +, Atle Sandvold wrote: > Eric Murray wrote: > > > > On Tue, Jul 20, 1999 at 02:23:39PM +, Atle Sandvold wrote: > > > Hi! > > > > > > Does anyone know about a smart card which contains public key > > &g

Re: MUSCLE Crypto card

1999-07-20 Thread Eric Murray
ypto part of their > "GemXpresso 210 PK" didn't work unless you had a developer kit(which > didn't actually exist). > > Can anyone help me here? What about other Gemplus cards like the GPK4000? That card has a 1024-bit RSA engine. -- Eric Murray N*Able Techno

Re: MUSCLE SSLEAY & GPK4000

1999-06-27 Thread Eric Murray
rrect number of bytes. That's how it tells which hash you're feeding it. Also, are you sure that you're using the same PKCS#1? The GPK uses v1.5 but there is a new v2.0 standard out since last summer, which is very different and is based on the OAEP padding scheme to prevent adapt

MUSCLE GPK400 3DES auth

1998-08-04 Thread Eric Murray
Does anyone have code that implements the 3DES authentication that's used on GPK4000 cards? -- Eric Murray Chief Security Scientist N*Able Technologies www.nabletech.com (email: ericm at lne.com or nabletech.com) PGP keyid:E03