On Fri, 22 Jun 2001, Jim Rees wrote:
> Ok, so you have a bunch of executables and a table of pre-computed CRC's.
>
> No, you have a bunch of executables, and for each you have a crypto hash
> signed with a private key.
Ok.
> You could store the public key in the secure rom, but this guy wa
On Fri, 22 Jun 2001, Patrick Valsecchi wrote:
> I can sign the kernel, the executables and the libraries. The loader (lilo) can
> be in the securized memory of the processor. So before it loads the kernel, it
> checks the signature with the smartcard. Then I'm quit sure it's my own kernel
> th
On Fri, 22 Jun 2001, Jim Rees wrote:
> But if you really are concerned about "very skilled hackers" you will need
> significant hardware protection, like a processor with integrated boot code
> or an epoxy potted processor and boot rom module. Even then you won't be
> able to completely protect
Jim Rees said on Dec. 23:
>The "get challenge" apdu, 0x84, normally returns a random number. I once
>collected 160 bytes from a Payflex P1 card and ran some simple
>tests. I don't know how the rng is implemented in Payflex, and it's
>probably a highly guarded secret.
1.6M of random bits re
Hello everyone,
I suspect this is a bit off-topic, and if so responses in private email
would be welcome.
I am looking to purchase a PCMCIA Smartcard interface. A look at the
MUSCLE website indicates that drivers exist for an Omnikey and GemPlus
PCMCIA card, but I have not been able to find a