Questions tagged [smartcard]
A smart card, or chip card, is a fingernail-sized integrated circuit that is often embedded in a credit-card-sized plastic sheet. Smart cards are used as identification badges, banking cards, SIM in mobile phones, for key storage, and more.
232
questions
0
votes
0
answers
16
views
Windows Certificate Propagation Service configuration
I'm having the same issue of this fellow user.
I have a certificate stored in the Windows user personal store and in a YubiKey. When I plug the YubiKey, the Certificate Propagation Service discovers ...
- 1
0
votes
1
answer
34
views
Certificate Propagation Service CertPropSvc immediately stops
Trying to use my smartcards, suddenly the certificates do not propagate. I try starting and restarting the Certificate Propagation Service, but it immediately stops.
An event is created in the Event ...
- 141
1
vote
0
answers
16
views
Self signing keystore certificates using smart card
Forgive my Naivety on the topic, I was only recently (this month) pushed into the application & data security rabbit hole and am still learning.
I have a smart card issued by my organization, it ...
- 121
1
vote
0
answers
35
views
Login with self-signed PGP/GPG cert. without security key
Is there a way I can use a PGP certificate to login on my computer, but without a smartcard? I have multiple self made certificates for document encryption and also a state issued one for legal ...
- 13
0
votes
0
answers
59
views
Can you require both a password and a smart card to unlock a bitlocker drive?
I seen you can associate a smart card when you encrypt the drive with bitlocker, but I am not sure if ...
You can unlock with a smart card as an alternative to your password that you set (not the ...
- 140
2
votes
1
answer
78
views
Determine if the client certificate comes from a smarcard in mTLS [closed]
I am designing a web access gateway that authenticates users through certificates using the mTLS mechanism. I would like to be able to identify the users that access the system using a Smartcard and ...
- 31
0
votes
0
answers
30
views
How to implement challenge-response authentication using PKCS11
I have been searching for a way to use challenge-response over PKCS11, is that possible? I have found that it is possible for Windows Minidriver, but all the PKCS11 challenge-response protocols are ...
- 141
0
votes
0
answers
140
views
Using Yubico Yubikey 5 NFC with NFC in Windows 10
I need to use NFC to run Yubikey, which is running on a USB connection.
However, when I try to do so, I get the following error:
GPG:
> gpg --card-status
gpg: selecting card failed: No such device
...
- 1
1
vote
1
answer
58
views
Is there a way to store a verification-hash of a secret on a 'consumer HSM' like Yubikey or another WebAuthn device?
Context: I'm trying to design an SRS solution for your personal secrets - "Anki for passwords." (This is mostly a learning-exercise, to help me develop my intuition for writing secure(-ish?) ...
- 285
1
vote
1
answer
105
views
How safe is a certificate on a smart card in terms of microscopy?
I wonder if it is possible for an attacker to dump the certificate of a smart card using microscopy. For example an electron microscope.
Please do not blame me if there is nothing to see because the ...
- 133
0
votes
0
answers
24
views
Smardcard-Login and LDAP-Webinterfaces
If "smartcard required" is ticked in an active directory user account the password is wiped.
In my enviroment there are a lot of applications with webinteface logins connected via ldap to AD....
0
votes
1
answer
112
views
How do RSA smartcards prevent key exfiltration?
Extracting private keys directly from the card is nearly impossible. With some acid package destruction and electron microscope work, a skilled team, and enough time, money, and luck you can in theory ...
0
votes
1
answer
64
views
GnuPG: gpa.exe hungs when click on "smartcards" AND scdaemon cannot recognise SC-HSM 4K
https://dev.gnupg.org/T6097
I am tring it get GnuPG to work with my SmartCard-HSM 4K on Windows, using the GP4Win bundle.
Kleopatra doesn't recognise the SC-HSM 4K at all, even though, it DOES ...
- 141
0
votes
1
answer
166
views
Make certificate and private key available only to a single app
I want to make a smart card reader app, that sends read data to a server. In order to be certain in the integrity of the data, I want to use a client certificate to communicate with the server and I ...
- 11
0
votes
0
answers
16
views
PGP certify key redundancy
The whole issue is caused by my usage openpgp cards I have 3 cards where I am using one as a Master card with Certify key on it and the second one as a daily runner. The third card was meant to be ...
- 101
9
votes
1
answer
2k
views
How do GPG smart card devices handle large GPG operations?
How do GPG smart card devices (such as a Yubikey) handle large GPG operations? Such as signing binary programs.
My first 2 pet theories are:
There's some way to chunk up GPG operations or use some ...
- 93
2
votes
1
answer
344
views
SafeNet eToken 5110CC w/ IDPrime 940MD: Generating ECC384/521 Errors + ICC/CVC Authentication
I am trying to utilize the SafeNet eToken 5110CC, which basically has the IDPrime 940MD with the applet 4.4.2.A., to generate ECC keys with lengths 384bits and 521bits to no avail.
The product brief ...
- 141
1
vote
1
answer
202
views
How do I get my server HSM working while connected via RDP? (Win 2019)
The error I get from pkcs11-tool.exe is "No slots."
My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop....
- 403
3
votes
0
answers
235
views
Move signing subkey to authentication slot on YubiKey (OpenPGP card)?
My PGP primary key is only used for certification—I use a separate subkey for signing. Like this:
sec rsa4096/0x891781D0EDC66456 ...
- 376
0
votes
0
answers
142
views
Using smart card for gnupg
I want to buy a smart card to store a gpg private key (I have never used any before).
However all options seem quite expensive. If you look for ISO 7816 in AliExpress there are much more affordable ...
- 101
0
votes
2
answers
177
views
How/What to prompt user for fingerprint login using smartcard?
We are using a PIV smartcard that has biometric information (fingerprint) of the user encoded on the card to login into our application. We have the capability to read the fingerprint from a reader ...
1
vote
0
answers
62
views
GPG - use cached key before prompting for other cards when multiple receivers?
When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple 'receivers', the default behaviour is that it tries to find and use private keys in some ...
- 123
2
votes
1
answer
274
views
ePassport Chip Authentication - how to verify?
I want to implement Chip Authentication for ePassport documents, and wish to validate my understanding of it.
I've managed to get it up and running by using the JMRTD library, specifically the ...
- 185
2
votes
0
answers
162
views
Does the USB connection have to be trusted when using Yubikey CCID/PIV?
I use a Yubikey in PIV/CCID mode. The PIN is sent from the host computer via automated script and unlocks the Yubikey PIV smartcard.
In this mode, is it essential that the USB connection is trusted?
...
- 121
0
votes
2
answers
206
views
Can ISO 7816 (EMV) based smart card handle interrupts?
ISO 7816 smartcards are typically used in EMV transactions. I know that the card can perform arbitrary actions before sending a response to the terminal in a typical EMV transaction (e.g. signing ...
- 111
2
votes
1
answer
805
views
What does a TPM have in common with smart cards?
The title really says it all. I'm starting to dig a little bit into computer security and from what I've watched or from what I have read in books or articles there's always a mention of basic smart ...
- 125
1
vote
1
answer
423
views
Are wedge attacks on EMV cards still viable?
I was looking around to see if wedge attacks on EMV cards are still viable or a solution has been implemented, and if so, have attackers found another way around the solution?
The latest literature or ...
- 25
0
votes
1
answer
205
views
MFA using PKI certificates [closed]
I'm trying to set up a multi factor authentication using PKIs certificates.
A PKI infrastructure is ready to use and i'm planning to put these certificates on smart cards.
I was looking for a smart ...
- 1
2
votes
1
answer
925
views
Is it possible to export an expired GPG subkey's public key without signatures?
Based on Is it possible to export a GPG subkey's public component? I got familiar with:
gpg --keyid-format long --with-fingerprint --list-key {e-mail}
gpg --export --armor --output public-key.asc ...
- 131
1
vote
0
answers
327
views
How smart cards are blocked?
I have a Yubikey NFC 5, when I enter a wrong PIN or PUK three times the smart card is blocked.
Can someone please explain to me how it is blocked ? Does the PIN/PUK functionality is disabled somehow ? ...
- 193
0
votes
1
answer
153
views
How can hackers steal from a savings account that has no client card? [closed]
Someone I know was stolen a few hundreds dollars from a savings account. Looking at the history, she saw transactions like Uber rides and video games purchases she did not do. This account is used ...
- 103
1
vote
1
answer
1k
views
GnuPG - connecting to specific card reader when multiple reader available
Currently I can use
$ gpg --expert --card-status
to interact with smartcards that run the OpenPGP applet. Through trial-and-error, it seems that only the first card reader will interact with gpg. ...
- 172
2
votes
0
answers
222
views
Cryptoki PKCS11 C_Decrypt returns shorter key (decrypted message) than expected
First off let me say I'm fully aware this question can only be answered by the token vendor but I have already contacted them and with the whole COVID situation my hopes of hearing from them soon are ...
- 176
0
votes
1
answer
596
views
Can one use a gpg smartcard to implement FIDO2?
From what I understand, the idea of FIDO2 is to use symmetric cryptography, with secret key on the token, and public key on the server. When requesting to connect, the server uses the public key to ...
- 275
0
votes
2
answers
206
views
smart card authentication process
Smart cards (for instance, public transit cards) are widely used in some countries for authentication purposes at universities and workplaces, so that an authorized person can use a printer or access ...
- 15
0
votes
2
answers
160
views
how to trust a PGP smartcard
I understand the interest of using a PGP solution that is based on a OpenPGP smartcard, such as the Nitrokey Pro or similar. But then, how can I decide that I trust an OpenPGP smartcard?
- 275
4
votes
0
answers
167
views
Security implications of using unfused U2F token
I noticed that both of the Feitian USB/NFC U2F Security Keys I purchased on Amazon a few years ago are unfused. This means that the pre-personalization step was partially performed but not completed ...
- 205
13
votes
1
answer
6k
views
gpg2: How to get rid of "Please insert card with serial number", getting the same key from a different card / Yubikey
I have multiple Yubikeys carrying the same GPG secret key. I want to switch from one Yubikey to anohter one on my laptop. The two obviously have different serial numbers.
After switching the keys ...
- 543
1
vote
0
answers
101
views
using public key crypto instead of password for authentication [closed]
I'm the head of IT and development in a small group of enthusiasts spending their free time with a bit of hobby development. We don't have an office yet, but maybe consider to rent some small office ...
- 31
3
votes
0
answers
198
views
What exactly is the Management Key on a yubikey?
The yubico documentation mentions that a Management Key can be set manually, or it can be inferred in the SoC when setting a PIN for the first time.
What exactly is that management key and how does ...
- 171
0
votes
0
answers
539
views
How to find sniff communication to smart card reader?
I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
- 187
1
vote
0
answers
904
views
Is it possible to decrypt Outlook Web App S/MIME messages in a web browser with same webclient? [closed]
Normally, you would use a mail client for mail encryption. Though, I can access smartcard security functions from the browser for a secure login.
Therefore, is it possible to decrypt Outlook Web App ...
- 127
0
votes
1
answer
592
views
Cloning Credit/debit card chip [closed]
I have a nice, expensive, metal credit card with a chip but it's from an older card. I’m wanting to rewrite the magnetic stripe and the chip to my new card. I know how to rewrite the magnetic stripe ...
- 1
3
votes
1
answer
193
views
Technical realization of fraudulent credit card cash withdrawal
Somebody unauthorized in India managed to withdraw cash from my credit card account. The card I use (and which they claim to have used) is a German Visa prepaid card issued by Postbank. It has a chip ...
- 1,033
4
votes
0
answers
259
views
Should I use the same OpenPGP keys in certificates used to provision the YubiKey PIV slots?
I know PIV and OpenPGP are separate standards and independent applications in the YubiKey, but for newcomers like me they look very similar with their signing, encryption and authentication keys, use ...
- 41
4
votes
1
answer
1k
views
GnuPG can see a card under root user, but not under normal user
When under an unprivileged user:
$ gpg --card-status
gpg: selecting openpgp failed: No such device
gpg: OpenPGP card not available: No such device
With sudo or under a root user:
$ sudo gpg --card-...
- 414
0
votes
0
answers
1k
views
Does OpenSC required proprietary Gemalto SafeNet middleware to support Gemalto IDPrime card?
I am interesting by buying a Gemalto IDPrime MD 830 card to be used onto two computers in various scenarios:
- Storing certificate (Windows, Linux)
- Authentication (Linux)
The Windows computer would ...
- 136
6
votes
1
answer
4k
views
Can one use a Credit Card as a Smart Card?
Okay, first question on any Stack Exchange site, and Information Security seems the most fitting for this question.
Anyways, I realized that my laptop has a smart card reader. I understand that ...
- 61
2
votes
1
answer
4k
views
Smart cards and the behaviour of the browser. Is the PIN cached?
When using smart cards for certificate-based authentication, is the PIN entered by the user to authenticate his smart card to the browser is cached? OR does the certificate gets cached by the browser? ...
1
vote
1
answer
373
views
OpenPGP SmartCard: generate revocation certificate on-card?
As far as I can tell:
It is possible to generate a private keyring (i.e. signing private key, plus associated encryption private key and authentication private key) entirely on an OpenPGP Smartcard (...
- 1,991