Questions tagged [smartcard]
A smart card, or chip card, is a fingernail-sized integrated circuit that is often embedded in a credit-card-sized plastic sheet. Smart cards are used as identification badges, banking cards, SIM in mobile phones, for key storage, and more.
38
questions with no upvoted or accepted answers
5
votes
0
answers
279
views
Desktop browser that supports Fido U2F over CCID
Is there any browser that supports Fido U2F over CCID for smart cards? As far as I can see Firefox and Chrome only support U2F over HID, and only Chrome for Android (with Google Authenticator2) ...
- 193
5
votes
2
answers
729
views
Can SIM card be locked to the specific equipment?
I'm curious if SIM card can be "personalized" to operate only in the specified mobile equipment in addition to usual PIN security. So the SIM extracted from "legitimate" phone and placed into ...
- 173
4
votes
0
answers
189
views
Security implications of using unfused U2F token
I noticed that both of the Feitian USB/NFC U2F Security Keys I purchased on Amazon a few years ago are unfused. This means that the pre-personalization step was partially performed but not completed ...
4
votes
0
answers
295
views
Should I use the same OpenPGP keys in certificates used to provision the YubiKey PIV slots?
I know PIV and OpenPGP are separate standards and independent applications in the YubiKey, but for newcomers like me they look very similar with their signing, encryption and authentication keys, use ...
- 41
3
votes
0
answers
287
views
Move signing subkey to authentication slot on YubiKey (OpenPGP card)?
My PGP primary key is only used for certification—I use a separate subkey for signing. Like this:
sec rsa4096/0x891781D0EDC66456 ...
- 396
3
votes
0
answers
270
views
What exactly is the Management Key on a yubikey?
The yubico documentation mentions that a Management Key can be set manually, or it can be inferred in the SoC when setting a PIN for the first time.
What exactly is that management key and how does ...
- 213
3
votes
2
answers
3k
views
Getting Certificate KeyContainerName to initialize CspParameters
How can I get the name of a Key Container that's in a smart card required for initialization of CspParameters?
CspParameters^ cspa = gcnew CspParameters(ProviderType, ProviderName, keyContainerName, ...
Andrius Dobrotinas
2
votes
0
answers
186
views
Does the USB connection have to be trusted when using Yubikey CCID/PIV?
I use a Yubikey in PIV/CCID mode. The PIN is sent from the host computer via automated script and unlocks the Yubikey PIV smartcard.
In this mode, is it essential that the USB connection is trusted?
...
- 121
2
votes
0
answers
248
views
Cryptoki PKCS11 C_Decrypt returns shorter key (decrypted message) than expected
First off let me say I'm fully aware this question can only be answered by the token vendor but I have already contacted them and with the whole COVID situation my hopes of hearing from them soon are ...
- 196
2
votes
0
answers
133
views
What forces SSL exchange to require my smartcard to finish handshake
First, I hope that this is a legitimate question because it is spawned by what I am experiencing and what is happening. The environment is as follows... I have an apache reverse proxy, that I stood ...
- 21
2
votes
0
answers
1k
views
Does Chrome cache smartcard PIN?
When I have authenticated with a server suing TLS/SSL using HTTPS using a smartcard and PIN and I invalidate the TLS session by restarting the server, refreshing Chrome browser does not reprompt for a ...
- 131
2
votes
0
answers
129
views
Security implications of owning a German electronic ID card
I am German and about to renew my ID card.
Since around 2010, the new ID cards contain an electronic chip that can be used for e.g. online authentication. If I understood the documentation correctly,...
- 160
2
votes
0
answers
934
views
HTTP proxy for smart card based SSL
I am trying to pentest a web application, which seems to be using the user's smartcard for building up the SSL tunnel, and by that implementing smartcard authentication. My problem is that I haven't ...
- 59
2
votes
0
answers
455
views
Which entriey does a Card Verifiable Certificate contain?
Which entries e.g. public key, valid until, etc. does a CVC has and where can I find a good explanation of this elements? - also with the size, which an entry and related to that, which size the ...
- 239
2
votes
0
answers
2k
views
How to add another UID to key on OpenPGP card?
I have an OpenPGP key on a smart card that I've used for some time. I now wish to add some additional email-addresses to the key. So I insert my card into the reader and execute gpg2 --edit-key for my ...
- 21
2
votes
0
answers
183
views
What's the standard protocol for secure contactless communication
A contactless smartcard has to communicate with a reader in a secure way.
The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...
- 1,213
2
votes
0
answers
365
views
OpenPGP smartcards compromised by blackhat 2015 simcard hack?
This blackhat was a new sidechannel attack in the SIM-card AES encryption announced.
I am currently using the OpenPGP smart/SIM-card version 2.1 to store my PGP-private keys, which is the same model ...
- 131
2
votes
0
answers
188
views
SAM Card deployment best practice
As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
- 261
1
vote
0
answers
65
views
Deriving EC keypairs pairs via PKCS11?
I'm a bit confused with PKCS11 (v3) standard...
In particular, it's blurry to me if one can invoke C_DeriveKey, passing, say, CKM_SHA512_KEY_DERIVATION (or some HKDF) to it as the mechanism and also ...
1
vote
0
answers
136
views
Self signing keystore certificates using smart card
Forgive my Naivety on the topic, I was only recently (this month) pushed into the application & data security rabbit hole and am still learning.
I have a smart card issued by my organization, it ...
- 121
1
vote
0
answers
83
views
Login with self-signed PGP/GPG cert. without security key
Is there a way I can use a PGP certificate to login on my computer, but without a smartcard? I have multiple self made certificates for document encryption and also a state issued one for legal ...
- 13
1
vote
0
answers
80
views
GPG - use cached key before prompting for other cards when multiple receivers?
When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple 'receivers', the default behaviour is that it tries to find and use private keys in some ...
- 123
1
vote
0
answers
438
views
How smart cards are blocked?
I have a Yubikey NFC 5, when I enter a wrong PIN or PUK three times the smart card is blocked.
Can someone please explain to me how it is blocked ? Does the PIN/PUK functionality is disabled somehow ? ...
- 213
1
vote
0
answers
337
views
Where is the ID chip in this card?
I recently attended a Salesforce World Tour. As part of being identifiable and being marketable you get this ID card that the exhibitors scan, so that they can get your name, company, email and ...
- 185
1
vote
0
answers
213
views
What's the difference between random number evaluation among AIS-31 AIS-20 and NIST sp800-22
I'm trying to know about the evaluation of random number generated by smart card chip. But these standards AIS-31, AIS-20 and NIST sp800-22 confuse me. Could someone help me with a brief explanation ...
- 11
1
vote
0
answers
280
views
Missing link between Java javax.smartcardio and OpenPGP functionality
As I understand, Yubikey NEO in CCID mode can be used as a SmartCard. I connected it, configured using GnuPG and tested using Kleopatra: encrypted a text file.
Is it possible to encrypt data with ...
- 183
1
vote
0
answers
374
views
secure key management using smart card
I have a scenario where I want to encrypt the file data on client machine along with smart card authentication. I have followed a link that states that for smart cards, private key never leaves The ...
- 11
1
vote
0
answers
96
views
Looking for OpenSC compatibile token
I am currently proud user of Feitan ePass2003 with OpenSC, however it is not 100% reliable on Windows, on Linux it's just perfect.
Anyway I started to looking and I have two candidates eToken Pro 64K ...
- 63
1
vote
0
answers
488
views
Can we create custom APDU for non-smart (memory type) contactless card?
I want to implement card-based authentication for the parking system in a university. Currently all students own a Java Card-based student ID card, if they have not broken or lost it.
Can we create ...
- 11
0
votes
0
answers
25
views
compatability of Desfire EV1/2 readers and cards with a Doorking access control system
I am getting the idea that Doorking's ProxPlus cards and reader have a pre-defined encryption key in their reader. As these readers are wiegand devices and the software for the Doorking Access systems ...
0
votes
0
answers
33
views
Can I Use an OpenPGP Smart Card to Sign a TLS Certificate?
I've been looking around for smart cards with support for Ed25519. More specifically, I'd like to have a TLS CA with the private key on a YubiKey. The latest YubiKey 5 supports secp256k1, secp384r1, ...
- 6,753
0
votes
1
answer
350
views
Mifare Desfire authentication process / cloning protection
I am trying to write a small explanation for a customer, who wants to understand why his Mifare Desfire transponders are safe from being cloned.
I was trying to search for an easy scheme or text that ...
- 1
0
votes
0
answers
170
views
Windows Certificate Propagation Service configuration
I'm having the same issue of this fellow user.
I have a certificate stored in the Windows user personal store and in a YubiKey. When I plug the YubiKey, the Certificate Propagation Service discovers ...
- 1
0
votes
0
answers
249
views
Can you require both a password and a smart card to unlock a bitlocker drive?
I seen you can associate a smart card when you encrypt the drive with bitlocker, but I am not sure if ...
You can unlock with a smart card as an alternative to your password that you set (not the ...
- 140
0
votes
0
answers
195
views
Using smart card for gnupg
I want to buy a smart card to store a gpg private key (I have never used any before).
However all options seem quite expensive. If you look for ISO 7816 in AliExpress there are much more affordable ...
- 101
0
votes
0
answers
652
views
How to find sniff communication to smart card reader?
I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
- 187
0
votes
0
answers
1k
views
Does OpenSC required proprietary Gemalto SafeNet middleware to support Gemalto IDPrime card?
I am interesting by buying a Gemalto IDPrime MD 830 card to be used onto two computers in various scenarios:
- Storing certificate (Windows, Linux)
- Authentication (Linux)
The Windows computer would ...
- 146
0
votes
0
answers
1k
views
In what ways may a SAML2 service provider interoperate with an agency using Common Access Cards (CAC)
I'm at a service provider organization that supports shibboleth-style and CAS third party authentication. I'm looking at the requirements to meet the low baseline of FedRamp (see FedRAMP Security ...
