Collaborate Disseminate
I am looking to read data from European identity cards using USB smart card reader.
The purpose is to enable easier data input, e.g. when the customer is checking into a hotel.
The data that I would like to read from the ID card are alread… Continue reading How can one read data from European identity cards using smart card reader? [closed]
I just started using a Yubikey 5. I’ve set up GPG according to this excellent guide, and now I have 3 working ECC key pairs on my Yubikey: Sign/S :: ed25519, Encrypt/E :: cv25519, Authentication/A :: ed25519.
Now I want to use my Yubikey t… Continue reading Certify using Yubikey
Here is my thought process:
I want to use smartcards without passwords for my setup. We don’t want to use Iris or fingerprint or voice. I only want to put in the card whenever something needs to authenticate and when I take out the card wh… Continue reading How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?
I am getting the idea that Doorking’s ProxPlus cards and reader have a pre-defined encryption key in their reader. As these readers are wiegand devices and the software for the Doorking Access systems has no means of doing authentication o… Continue reading compatability of Desfire EV1/2 readers and cards with a Doorking access control system
I’ve been looking around for smart cards with support for Ed25519. More specifically, I’d like to have a TLS CA with the private key on a YubiKey. The latest YubiKey 5 supports secp256k1, secp384r1, and RSA 2048 in the PIV tool for storing… Continue reading Can I Use an OpenPGP Smart Card to Sign a TLS Certificate?
A smart card storing its secrets in it own flash storage, but does it encrypts them? Or are them in flash as plain-text? Some claim it encrypts, but if secrets are encrypted in flash, how card can use them? It need password for them from o… Continue reading Do smart cards encrypt their secrets? [closed]
How smart cards technically store their secrets?
I know smart card is whole computer on chip and it respond only to challenges. I know their software/firmware doesn’t allow (it doesn’t have the feature for that at all) to ever reveal the s… Continue reading How smart cards store their secrets? [duplicate]
I’m a bit confused with PKCS11 (v3) standard…
In particular, it’s blurry to me if one can invoke C_DeriveKey, passing, say, CKM_SHA512_KEY_DERIVATION (or some HKDF) to it as the mechanism and also set the following in the template:
CKA_… Continue reading Deriving EC keypairs pairs via PKCS11?
How are the above devices built and what is the mechanism that seals them off from giving out private keys? Are the sign/decrypt operations somehow soddered into their hardware, is it a tiny piece of software which only API is to perform t… Continue reading What mechanism stops smartcards and YubiKeys from exporting private keys?
I am trying to write a small explanation for a customer, who wants to understand why his Mifare Desfire transponders are safe from being cloned.
I was trying to search for an easy scheme or text that explains how the authetication process … Continue reading Mifare Desfire authentication process / cloning protection