btw, if anyone wants to touch the cardos/splitkey code:
we could as well remove it and simply store "sign,decrypt" as "decrypt" key
and do the signing internaly. 

after a few years, I think the hack to copy the key didn't work out so well,
and if you can use card+pin for decrypt'ing, there is no security benefit
in not using it.

we should stay compatible with cards initialized with old opensc however.

Regards, Andreas
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to