Anders Rundgren wrote:

Conclusion: the smart card industry is working with dated designs
that doesn't really scale.

The smartcard industry knows where the money is, and it's not in selling cards.

Tim: private keys are protected by a master key residing in EEPROM
in the USB controller.

That's fine for *storage.* Storage is only *one* place where key exposure is a concern. Where's the key when it's being used? Are you using the USB controller as a crypto engine?

-- Tim

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to