How does an application get the private key from a smart card in order to sign some data?
I presume that the data is being signed by a code running on the main OS (Windows/Linux) and not on the smart card device. am I correct?
Also, some smart cards involve PINs in the process. Does the PIN add value?