Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Do you also have any pointers on the second part of the question regarding the ICC/CVC for card authentication? I can create a customized version of SAC 10.8 R6 (SAC Customization Tool) and there is the option to include a custom public key for customized cards. But, there is no option to customize the card itself with stock cards. Probably this, too is for custom large orders.
Another difference I noticed: The eToken 5110 FIPS does not support ECC384+, but the eToken 5110+ FIPS does, even though both are based on the IDPrime 930 (FIPS) card.
Indeed, I also came to the conclusion that the "custom configuration" is some kind of feature change in firmware and only for those who can make custom orders (large CAs). tried the regular importing of ECC384 and it still does not allow it. Of course, loading from an HSM could still allow it. Even with a blocked PUK, the devices can still be used, but the PIN cannot be reset. YubiKeys in PIV work in the same way.
I considered adding it to the Cryptography site, but I am more concerned as to the motives behind this implementation. The related question that's already answered on the Cryptography site is about whether the implementation is secure, which is already known NOT to be...
