Re: How secure are smartcards?

2011-08-06 Thread Richard
Hello, On Mon, Jul 25, 2011 at 12:05, Olav Seyfarth o...@enigmail.net wrote: I did so but unfortunately my (old) card broke. So I was busted. To avoid that in the future, I now generated my new key for usage in the card on an offline system (e.g. Live-CD in RAM disk) and copied it on an old

Re: How secure are smartcards?

2011-08-06 Thread Richard
Whoops, typo: On Sat, Aug 6, 2011 at 12:46, Richard rich...@r-selected.de wrote: would it be sensible to encrypt the key on the memory card key using the encryption key stored on both smartcards? was meant to read: would it be sensible to encrypt the key on the memory card using the

Re: How secure are smartcards?

2011-07-29 Thread Mike Cardwell
On 29/07/2011 02:45, Jerome Baum wrote: The very purpose of smartcards is to keep secret keys confidential and secure. This is achieved by physical protection, different layers, puzzling structure etc. This makes it very, very difficult to extract the keys. For a state-of-the-art smart card

Re: How secure are smartcards?

2011-07-29 Thread gnupg
On 29/07/2011 06:03, Jay Litwyn wrote: The beauty is that this protection can be provided without the burden for the user to remember a long passphrase, since this is not required to encrypt the keys. You could use random symmetric encryption keys and encrypt them with a short passphrase:

Re: How secure are smartcards?

2011-07-29 Thread Richard
On Fri, Jul 29, 2011 at 02:05, Crypto Stick cryptost...@privacyfoundation.de wrote: For a state-of-the-art smart card like the OpenPGP Card 2, I guess the price tag would be around 100.000 Euros 100.000 as a one-time investment for breaking into an unlimited number of OpenPGP smart cards? If I

Re: How secure are smartcards?

2011-07-29 Thread Werner Koch
On Fri, 29 Jul 2011 11:58, rich...@r-selected.de said: 100.000 as a one-time investment for breaking into an unlimited number of OpenPGP smart cards? If I were a government, I would definitely buy Whatever the number is, it is for each break and you have only a certain probability so

Re: How secure are smartcards?

2011-07-28 Thread Jay Litwyn
-BEGIN PGP SIGNED MESSAGE- In my entry on a related thread, I was thinking that one of the simpler ways to foil attacks on bank cards would be to make a smart card play dumb and accept any old pin (symmetric encryption key for a private key). That would (almost) force attackers to

Re: How secure are smartcards?

2011-07-28 Thread Crypto Stick
At the moment, my secret key is stored on my hard drive and is encrypted by a long passphrase. When I transfer my subkeys to the smartcard, will they actually be encrypted whilst they're on there? The very purpose of smartcards is to keep secret keys confidential and secure. This is achieved

Re: How secure are smartcards?

2011-07-28 Thread Jay Litwyn
-BEGIN PGP SIGNED MESSAGE- On 2011-07-28 6:05 PM, Crypto Stick wrote: At the moment, my secret key is stored on my hard drive and is encrypted by a long passphrase. When I transfer my subkeys to the smartcard, will they actually be encrypted whilst they're on there? The very

Re: How secure are smartcards?

2011-07-27 Thread Werner Koch
On Tue, 26 Jul 2011 18:07, j-...@ottosson.nu said: Even worse though, as I recall from the time when I worked with IBM crypto processors like 4758 etc, a lot of the people inside the (somewhat introvert) banking community working with security, had no clue and actually believed that Part

Re: How secure are smartcards?

2011-07-26 Thread Hubert Kario
On Monday 25 of July 2011 17:45:16 Werner Koch wrote: As it is not possible to secretly read out the key you will almost always have the opportunity to revoke the key before a damage is possible. The key is also useful for decrypting past communication... Regards, -- Hubert Kario QBS -

Re: How secure are smartcards?

2011-07-26 Thread Werner Koch
On Tue, 26 Jul 2011 14:41, h...@qbs.com.pl said: The key is also useful for decrypting past communication... Well, you should have a backup of the decryption key. It is cheaper to steal that backup than to crack the card. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen

Re: How secure are smartcards?

2011-07-26 Thread Jerome Baum
Depends where you keep the backup. (Excuse the top post -- Android) (Mobile/Handy) Am 26.07.2011 16:29 schrieb Werner Koch w...@gnupg.org: On Tue, 26 Jul 2011 14:41, h...@qbs.com.pl said: The key is also useful for decrypting past commun... Well, you should have a backup of the decryption

Re: How secure are smartcards?

2011-07-26 Thread J. Ottosson
On 25 Jul 2011 at 20:12, Werner Koch wrote: For the v1 card you may want to have a look at the flylogic.net blog; they have lots of entries about different chips. There is no specific entry about the v1 card iirc, but I once sent them a few cards and they told me it would be easy to read it

Re: How secure are smartcards?

2011-07-25 Thread Mike Cardwell
On 25/07/2011 11:05, Olav Seyfarth wrote: I just ordered an OpenPGP smartcard from Kernel Concepts as per http://www.g10code.com/p-card.html Does anyone else have one of these? yes, I use these cards for several years now. This Email is signed by one. At the moment, my secret key is

Re: How secure are smartcards?

2011-07-25 Thread Olav Seyfarth
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi Mike, I just ordered an OpenPGP smartcard from Kernel Concepts as per http://www.g10code.com/p-card.html Does anyone else have one of these? yes, I use these cards for several years now. This Email is signed by one. At the moment, my

Re: How secure are smartcards?

2011-07-25 Thread Werner Koch
On Mon, 25 Jul 2011 12:21, gn...@lists.grepular.com said: adversary, and the key isn't encrypted on the smart card. Then they can just read it off, if they get hold of it. In that circumstance, you That might be true with the v1 card which used a pretty old chip. The v2 card uses a modern

Re: How secure are smartcards?

2011-07-25 Thread Mike Cardwell
On 25/07/2011 16:45, Werner Koch wrote: adversary, and the key isn't encrypted on the smart card. Then they can just read it off, if they get hold of it. In that circumstance, you That might be true with the v1 card which used a pretty old chip. The v2 card uses a modern chip and card OS

How secure are smartcards?

2011-07-24 Thread Mike Cardwell
Hi, I just ordered an OpenPGP smartcard from Kernel Concepts as per http://www.g10code.com/p-card.html Does anyone else have one of these? At the moment, my secret key is stored on my hard drive and is encrypted by a long passphrase. When I transfer my subkeys to the smartcard, will they

Re: How secure are smartcards?

2011-07-24 Thread Hubert Kario
On Sunday 24 of July 2011 22:14:31 Mike Cardwell wrote: Hi, I just ordered an OpenPGP smartcard from Kernel Concepts as per http://www.g10code.com/p-card.html Does anyone else have one of these? At the moment, my secret key is stored on my hard drive and is encrypted by a long