Re: MUSCLE SSH and Smartcards?

[Michael Renzmann]

Hi Eric.

> > What about using a crypted communication between
> > the reader and the card?
> That's no help.  The secret would still be on the
> (untrusted) host for the ssh authentication.

Yes, you´re right. I didn´t thought on that.

Bye, Mike


***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***

Re: MUSCLE SSH and Smartcards?

[Eric Murray]

On Thu, Aug 12, 1999 at 07:43:23AM +, Michael Renzmann wrote:
> Hi Jim.
> 
> > We use scfs to store the ssh private key on the card,
> > but this is not ideal because the secret leaves the
> > card during authentication.  
> 
> What about using a crypted communication between the
> reader and the card?


That's no help.  The secret would still be on the (untrusted) host
for the ssh authentication.


-- 
Eric Murray  www.lne.com/~ericm  ericm at the site lne.com  PGP keyid:E03F65E5
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***

Re: MUSCLE SSH and Smartcards?

[Michael Renzmann]

Hi Jim.

> We use scfs to store the ssh private key on the card,
> but this is not ideal because the secret leaves the
> card during authentication.  

What about using a crypted communication between the
reader and the card?

Bye, Mike


***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***

Re: MUSCLE SSH and Smartcards?

[Jim Rees]

  Does anybody know of a hook in ssh for using smartcard for authentification? 
  Is anybody working on this feature?

We use scfs to store the ssh private key on the card, but this is not ideal
because the secret leaves the card during authentication.  What you really
want is to do the crypto on the card.  Cyberflex should be capable of this
but we're not working on it at the moment.
***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***

MUSCLE SSH and Smartcards?

[Christoph Haenle]

Does anybody know of a hook in ssh for using smartcard for authentification? 
Is anybody working on this feature?

-Chris.


***
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***