When multiple keys exist on a given smartcard, how can a user choose between them for a given identifier ... ideally without a loss of privacy?
For example suppose I have a government issued ID that stores a set of keys for encryption and another set for non-repudiation. I then store an additional 3rd party key on it.
When I authenticate (or encrypt) government data, (versus 3rd party data) how can I "choose" the certificate being used?
Is certificate selection a feature of the OS, smart card driver, or smart card itself?
When choosing certificates on the card itself, I envision a button I can press like this one here:
The reason I ask this question is so I can understand not only normal smart card usage, but also instances where several UProve tokens are issued to a similar card (the interactions are likely going to be the same)