I am quite new to cards and tokens and trying to get a handle on a couple of issues prior to purchasing and using one.
1- physical access to keys on the card or token: Are all of these devices set up to (or easily configured to) require a pin/pw of some kind prior to use? So, for instance, if the card is lost, a pin must be entered prior to accessing any information or modules (ie, openpgp) that reside on the card?
2- What is the effect of a malicious keylogger on the use of a smart card or token? For instance, if using a USB type token w/smartcard capability, does a keylogger compromise all that is on the device, even if the attacker is unable to physically obtain the usb token?