Hello, you could use something like this: pkcs15-crypt --key 3b8d4e --input cipher.bin --decipher -R
The only requirement is libpcsclite. Everything else could be turned off. Correct? If you don't want a running pcscd, you could try to get libpcsclite to access the usb stack directly. In other words, build a wrapper around libccid with an api compatible with libpcsclite. Not an easy task, I know. Kind Regards Andre Zepezauer On Fri, 2010-10-22 at 12:25 +0100, Mr Dash Four wrote: > Is it possible to have a stripped-down and slimmed version of > pkcs11-tool (or a similar, may be new) program which does just one > thing: read the contents of a data object (given by either > application-id or application-label) on a smartcard (enter PIN if the > data object was previously stored with --auth-id option) and display it > on the console? I do not need this new program (modified pkcs11-tool or > otherwise) to do anything else, i.e. sign data, store keys, do hashing > etc - just to read a specified data object, display that data on the > console and finish. > > The reason I am asking for this is simple: I am currently designing a > module to be included in the initrd/initramfs which needs to read a data > object token from a smartcard and use this data to unlock/open root (/) > encrypted partition. > > if I use the current pkcs11-tool/pkcs15-tool I need to have at least 5 > other packages installed and satisfy another dozen or so other > dependencies (and have openct and possibly pcscd daemons running!), > which, to me, is a big overkill. Besides, initrd/initramfs run a very > limited kernel system and I am not sure I would be able to satisfy all > the dependencies in order to make it work, hence why I need a 'lite' > version of a tool which is designed to do just the reading and > displaying of the specified data object and that's it. > > Is this possible? > _______________________________________________ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
