Re: [opensc-devel] state of the project?
2012/11/22 Alon Bar-Lev alon.bar...@gmail.com On Wed, Nov 21, 2012 at 4:52 PM, Ludovic Rousseau ludovic.rouss...@gmail.com wrote: Hello, 2012/11/17 Alon Bar-Lev alon.bar...@gmail.com: On Sat, Nov 17, 2012 at 11:54 PM, Ludovic Rousseau I don't think I can give you admin access to only these 2 projects. I can add you as a member of the OpenSC organisation and you would have access to all the repositories. Yes you can, there are teams, each team can have admin/write/read access to specific repositories. I created a OpenCT maintainers team [1]. Alon Bar-Lev is the only member of the team but I can add others. Please do the same for pkcs11-helper, thanks! Done. -- Dr. Ludovic Rousseau ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
Re: [opensc-devel] state of the project?
On Thu, Nov 22, 2012 at 11:42 AM, Ludovic Rousseau ludovic.rouss...@gmail.com wrote: 2012/11/22 Alon Bar-Lev alon.bar...@gmail.com On Wed, Nov 21, 2012 at 4:52 PM, Ludovic Rousseau ludovic.rouss...@gmail.com wrote: Hello, 2012/11/17 Alon Bar-Lev alon.bar...@gmail.com: On Sat, Nov 17, 2012 at 11:54 PM, Ludovic Rousseau I don't think I can give you admin access to only these 2 projects. I can add you as a member of the OpenSC organisation and you would have access to all the repositories. Yes you can, there are teams, each team can have admin/write/read access to specific repositories. I created a OpenCT maintainers team [1]. Alon Bar-Lev is the only member of the team but I can add others. Please do the same for pkcs11-helper, thanks! Thanks! ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
Re: [opensc-devel] SmartCard-HSM Tool with key wrap / unwrap
Hello Andreas, Is the applet available for download or cards with pre-loaded applet on sale somewhere? Martin On Fri, Nov 9, 2012 at 7:33 PM, Andreas Schwier andreas.schw...@cardcontact.de wrote: Good evening, we've created a pull request towards OpenSC/staging for adding the SmartCard-HSM tool (sc-hsm-tool). Using version 0.17 or higher, the SmartCard-HSM provides for a key wrap / unwrap mechanism that allows to securely export and import card generated keys. Key values are encrypted under a 256-bit AES Device Key Encryption Key (DKEK) and saved to file with key description and optional certificate. From such a file, the key can be recreated in a SmartCard-HSM that has been set-up with the same DKEK. Using this mechanism, one can securely backup keys or migrate keys between different SmartCard-HSMs. This increases the capacity of the device, as infrequently used keys can be exported and archived externally. It also provides for redundancy and load balancing if keys are replicated in a cluster of SmartCard-HSMs. The DKEK can be recreated from a defined number of key shares. Such key shares are created with sc-hsm-tool and saved to file using password based encryption. Kind regards, Andreas -- -CardContact Software System Consulting |.## ##.| Andreas Schwier |# #| Schülerweg 38 |# #| 32429 Minden, Germany |'## ##'| Phone +49 571 56149 -http://www.cardcontact.de http://www.tscons.de http://www.openscdp.org ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
Re: [opensc-devel] Need help building Mac OS X packages
On Sun, Oct 14, 2012 at 3:27 PM, Ludovic Rousseau ludovic.rouss...@gmail.com wrote: I would suggest to drop the OpenSC tokend, unless someone volunteer to maintain it. I think my current mbp running 10.7 will be the last piece of Applet hardware/software combo I'll run, so the future is uncertain, but current situation is solid. I have not rebuild this tokend since a long time so it may be as easy (or hard) to rebuild as the tokend from OpenSC. The final version of OSX that supports *building* Tokend is 10.7. 10.8 also removes OpenSSL and that brings a stack of other problems for the future. But as of now, Tokend works as expected (but needs to be in sync with libopensc, of course). Will look into it. Martin ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
Re: [opensc-devel] SmartCard-HSM Tool with key wrap / unwrap
Hi Martin, cards and USB-sticks can be purchased at http://www.cardomatic.de/. The product does not yet show up in the online shop, but you can contact Karsten Niehusen directly (cc-ed above) for sales inquiries. Andreas Am 22.11.2012 12:29, schrieb Martin Paljak: Hello Andreas, Is the applet available for download or cards with pre-loaded applet on sale somewhere? Martin On Fri, Nov 9, 2012 at 7:33 PM, Andreas Schwier andreas.schw...@cardcontact.de wrote: Good evening, we've created a pull request towards OpenSC/staging for adding the SmartCard-HSM tool (sc-hsm-tool). Using version 0.17 or higher, the SmartCard-HSM provides for a key wrap / unwrap mechanism that allows to securely export and import card generated keys. Key values are encrypted under a 256-bit AES Device Key Encryption Key (DKEK) and saved to file with key description and optional certificate. From such a file, the key can be recreated in a SmartCard-HSM that has been set-up with the same DKEK. Using this mechanism, one can securely backup keys or migrate keys between different SmartCard-HSMs. This increases the capacity of the device, as infrequently used keys can be exported and archived externally. It also provides for redundancy and load balancing if keys are replicated in a cluster of SmartCard-HSMs. The DKEK can be recreated from a defined number of key shares. Such key shares are created with sc-hsm-tool and saved to file using password based encryption. Kind regards, Andreas -- -CardContact Software System Consulting |.## ##.| Andreas Schwier |# #| Schülerweg 38 |# #| 32429 Minden, Germany |'## ##'| Phone +49 571 56149 -http://www.cardcontact.de http://www.tscons.de http://www.openscdp.org ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- -CardContact Software System Consulting |.## ##.| Andreas Schwier |# #| Schülerweg 38 |# #| 32429 Minden, Germany |'## ##'| Phone +49 571 56149 -http://www.cardcontact.de http://www.tscons.de http://www.openscdp.org ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
