Re: MUSCLE BOUNCE kincses zoli kincses@ludens.elte.hu] (fwd)

[Jim Rees]

I had in mind Cyberflex, which is 16K.  Of course any card that already has
md5 built in will require hardly any additional space for skey.

I don't think gpk4000 is programmable, so it might or might not work.
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***

MUSCLE BOUNCE kincses zoli kincses@ludens.elte.hu] (fwd)

[David Corcoran]

From: kincses zoli [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
Subject: Re: MUSCLE Bounced mail

hi,

 accessable ONLY by SSH, and so I would find an SSH client that had
^^^

 been modified to fit on a smartcard to be very useful.
^
i read it three times...because i know how hard it was to do it
for DOS (one programmer student did it at ELTE Univ.),
and there is a little bit more memory, than in today's
smart cards...

maybe i know it wrong!?

zoli

***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***

Re: MUSCLE BOUNCE kincses zoli kincses@ludens.elte.hu] (fwd)

[Jim Rees]

It's not necessary, or even possible, to put the ssh client on a card.  What
is possible is to put the ssh client private key on a card.  I think we've
done that, it's not hard.  What's harder, and we have not done this, is to
put the private key on the card, and also do the crypto on the card, so that
the key is never exposed.

There is an ssh client for Palm computers, from the Topgun group at
Berkeley, so it is possible to put it on a small computer.  But not on a
card.

I've been thinking about how to use smartcards with the Palm.  I've got a
working card reader, but it uses the only serial port.  Most interesting (to
me) applications require a network, so you would need to use IR for the net,
and the serial port for the reader.

One interesting non-networked app is skey, and I do plan to put my skey key
on a card and use it with an OTP app on the Palm.  Palm OTP with md5 is only
27K so there is some hope it would fit on a card, especially if I can find a
javacard that does md5.  I think Cyberflex only does sha1.
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***