Re: MUSCLE Disk encryption and more

2001-06-22 Thread mgraffam
On Fri, 22 Jun 2001, Jim Rees wrote: > Ok, so you have a bunch of executables and a table of pre-computed CRC's. > > No, you have a bunch of executables, and for each you have a crypto hash > signed with a private key. Ok. > You could store the public key in the secure rom, but this guy wa

Re: MUSCLE Disk encryption and more

2001-06-22 Thread mgraffam
On Fri, 22 Jun 2001, Patrick Valsecchi wrote: > I can sign the kernel, the executables and the libraries. The loader (lilo) can > be in the securized memory of the processor. So before it loads the kernel, it > checks the signature with the smartcard. Then I'm quit sure it's my own kernel > th

Re: MUSCLE Disk encryption and more

2001-06-22 Thread mgraffam
On Fri, 22 Jun 2001, Jim Rees wrote: > But if you really are concerned about "very skilled hackers" you will need > significant hardware protection, like a processor with integrated boot code > or an epoxy potted processor and boot rom module. Even then you won't be > able to completely protect

Re: MUSCLE RNG's

2000-12-27 Thread mgraffam
Jim Rees said on Dec. 23: >The "get challenge" apdu, 0x84, normally returns a random number. I once >collected 160 bytes from a Payflex P1 card and ran some simple >tests. I don't know how the rng is implemented in Payflex, and it's >probably a highly guarded secret. 1.6M of random bits re

MUSCLE PCMCIA Smartcard interface

2000-12-27 Thread mgraffam
Hello everyone, I suspect this is a bit off-topic, and if so responses in private email would be welcome. I am looking to purchase a PCMCIA Smartcard interface. A look at the MUSCLE website indicates that drivers exist for an Omnikey and GemPlus PCMCIA card, but I have not been able to find a