2
votes
What mechanism stops smartcards and YubiKeys from exporting private keys?
Typically these devices contain a key or a small set of keys that are generated at the factory either on the device or are written into the device as part of the manufacturing process. There is also ...
- 9,284
2
votes
Accepted
Determine if the client certificate comes from a smarcard in mTLS
You'll need to handle this at issuance. There are many strategies for this. For example, on Windows, you could require certificates be issued using keys from one of the Microsoft Smart Card Key ...
- 1,256
2
votes
Accepted
SafeNet eToken 5110CC w/ IDPrime 940MD: Generating ECC384/521 Errors + ICC/CVC Authentication
Findings:
I found documentation from another company/vendor on these devices which indicate the x840 based cards (like the 5110 CC) and x940 based cards (like the 5110+ CC) do not support on-board ...
- 36
1
vote
How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?
First of all, I think it's worth talking about some terms. A public key is the half of a key which is public; that is, it is assumed everybody on the planet can know it without having any impact on ...
- 9,284
Only top scored, non community-wiki answers of a minimum length are eligible