Collaborate Disseminate
What are the pros and cons and differences between several key protection below ?
Online Wallet
software wallet
paper wallet
hardware wallet
hardware security module
trusted platform module
cloud key management system
smart card
keystores… Continue reading The best key protection
I use a Yubikey in PIV/CCID mode. The PIN is sent from the host computer via automated script and unlocks the Yubikey PIV smartcard.
In this mode, is it essential that the USB connection is trusted?
In other words if an attacker can sniff … Continue reading Does the USB connection have to be trusted when using Yubikey CCID/PIV?
Quoting from EMV Book 1:
This contact is used as an input (reception mode) to receive data from the terminal or as an output (transmission mode) to transmit data to the terminal. During operation, the ICC and the terminal shall not both b… Continue reading When does a card switch to transmission mode, and can it be done forcefully?
ISO 7816 smartcards are typically used in EMV transactions. I know that the card can perform arbitrary actions before sending a response to the terminal in a typical EMV transaction (e.g. signing dynamic data to generate SDAD). However, is… Continue reading Can ISO 7816 (EMV) based smart card handle interrupts?
Okta is a popular choice for organizations that want top-of-the-line cloud identity management. It’s one of the largest identity providers with a modern cloud directory and a plethora of handy features and useful integrations. In the quest to enhance… Continue reading Okta Smartcard Authentication Expanded
The title really says it all. I’m starting to dig a little bit into computer security and from what I’ve watched or from what I have read in books or articles there’s always a mention of basic smart cards (e.g. Chapter 3, “Scenarios for Us… Continue reading What does a TPM have in common with smart cards?
I was looking around to see if wedge attacks on EMV cards are still viable or a solution has been implemented, and if so, have attackers found another way around the solution?
The latest literature or post I can find goes back to 2010-2012… Continue reading Are wedge attacks on EMV cards still viable?
I’m trying to set up a multi factor authentication using PKIs certificates.
A PKI infrastructure is ready to use and i’m planning to put these certificates on smart cards.
I was looking for a smart card reader and I came across this one :
… Continue reading MFA using PKI certificates
We have to implement a personal identity verification system, where smart cards must be involved in the solution that involves also a gate with a card reader on it and a security man behind the gate’s computer that is mainly connected to l… Continue reading What information to save on a smart identity card and how to secure it
I was given an original DSTREAM debugger and Trace machine circa 2010 and was told it could be used for generating or regenerating cards with smart chips on them. Is this possible? Does the machine back trace any hacking attempts through w… Continue reading what can i use a DSTREAM 2010 for?