Hi Early this year I was asked by the German Privacy Foundation wether I was willing to enhance OpenSC support for their CryptoStick. http://www.crypto-stick.com/2011/opensc-pkcs11-driver-development
I wrote a PKCS#11-library for OpenPGP cards in 2010 so I have some experience with this kind of card. But I did not have enough time to do this job and I was unsure wether full OpenSC support for OpenPGP card was passible or not. Now Nguyễn Hồng Quân is trying to do this and I'm not sure wether he is going into the right direction. So my suggestion is to discuss the right direction first here on the mailing list. Peter Marshall seems to have written most of the current OpenPGP driver and Jan Suhr from German Privacy Foundation told me that Martin Paljak already tried to enhance the driver. Could you give us some information what the status of OpenPGP support is right now. Here are my own impressions - if they are wrong, please correct me: 1: OpenPGP cards do NOT have a filesystem like other smart cards. Instead of storing informations in EFs which are located in DFs an OpenPGP card stores information in Data Objects. Here my conclusion is: Without EFs and DFs and in particular without commands to create EFs and DFs pkcs15-init does not make any sense. 2: The current driver emulates SELECT and READ BINARY APDUs by reading from the corresponding Data Objects. I believe this was done in order to emulate a (read only) PKCS#15 file layout. If that was true - is there any hope to extend this emulation? 3: What features are missing in the current implementation and what bugs should be fixed? Peter
_______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
