Re: [opensc-devel] OpenCT 0.6.11-pre1 released

2006-11-14 Thread Alessandro Premoli
> OpenCT 0.6.10 doesn't compile on non-linux, so here is a fixed package: > > Please test and let me know if it works for you. Yes, it works. Thanks. -- Ale ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Nils Larsch
Andreas Jellinghaus wrote: Nils Larsch wrote: the code in apdu.c should do this automatically unless you explicitly disable this (but perhaps it would be useful if the iso get_response implementation would respect the reader limits). that code doesn't look at max_send/recv_size. if the card te

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Andreas Jellinghaus
Nils Larsch wrote: the code in apdu.c should do this automatically unless you explicitly disable this (but perhaps it would be useful if the iso get_response implementation would respect the reader limits). that code doesn't look at max_send/recv_size. if the card tells us it has 256 bytes, the

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Nils Larsch
Andreas Jellinghaus wrote: ... also I wonder: 2048bit signatures with cryptoflex 32k cards in scm readers - they won't work with ccid + pcscd + opensc either, correct? i.e. we need to implement get response in several small steps for cryptoflex? the code in apdu.c should do this automatically u

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Andreas Jellinghaus
Ludovic Rousseau wrote: btw: what exactly is ICCD? CCID = Chip/Smart Card Interface Devices I know CCID. but there is also ICCD: http://www.usb.org/developers/devclass_docs#approved Smart Card Class Smart Card CCID version 1.1 Smart Card ICCD version 1.0 If I understand things right, CCI

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Andreas Jellinghaus
Douglas E. Engert wrote: Can the SC_APDU_FLAGS_CHAINING be used to do this? In the piv_general_io routine in card-piv.c I have a large buffer, and set the resp.le = max_recv_size (256 for the PIV), but resp.resplen = buffer size, that is greater the max_recv_size. I don't think so, the code is

Re: [opensc-devel] User Consent Keys

2006-11-14 Thread Douglas E. Engert
Thomas Harning Jr. wrote: On Thu, 2006-10-26 at 11:05 -0500, Douglas E. Engert wrote: I would hope you would never try to cache a pin especially with a card like the one you describe: * If the card was issued such that you had to enter the pin before every signature, then you are viol

Re: [opensc-devel] User Consent Keys

2006-11-14 Thread Nils Larsch
Thomas Harning Jr. wrote: On Thu, 2006-10-26 at 11:05 -0500, Douglas E. Engert wrote: I would hope you would never try to cache a pin especially with a card like the one you describe: * If the card was issued such that you had to enter the pin before every signature, then you are violat

Re: [opensc-devel] User Consent Keys

2006-11-14 Thread Thomas Harning Jr.
On Thu, 2006-10-26 at 11:05 -0500, Douglas E. Engert wrote: > > I would hope you would never try to cache a pin especially with > a card like the one you describe: > >* If the card was issued such that you had to enter the pin > before every signature, then you are violating the policy >

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Douglas E. Engert
Andreas Jellinghaus wrote: Ludovic Rousseau wrote: Can you give me the extract of the CCID specs that says 271 is the minimal length? ok, didn't read the part about extended apdu. btw: what exactly is ICCD? also I wonder: 2048bit signatures with cryptoflex 32k cards in scm readers - they

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Ludovic Rousseau
On 14/11/06, Andreas Jellinghaus <[EMAIL PROTECTED]> wrote: Ludovic Rousseau wrote: > Can you give me the extract of the CCID specs that says 271 is the > minimal length? ok, didn't read the part about extended apdu. btw: what exactly is ICCD? CCID = Chip/Smart Card Interface Devices also I

[opensc-devel] OpenCT 0.6.11-pre1 released

2006-11-14 Thread Andreas Jellinghaus
Hi, OpenCT 0.6.10 doesn't compile on non-linux, so here is a fixed package: https://www.opensc-project.org/files/openct/testing/openct-0.6.11-pre1.tar.gz This new version only fixes a few minor bugs: New in 0.6.11; 2007-??-??; Andreas Jellinghaus * add usb reset for non-linux too (dummy code o

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Andreas Jellinghaus
Chaskiel M Grundman wrote: I do not think cryptoflex supports T=1. certainly, its ATR does not suggest that: ouch. should have checked he atr myself. Where did you get the idea that it does? crpytoflex programmers manual v4.5 page xxi "communication protocols: ISO T=0, T=1" Andreas

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Andreas Jellinghaus
Ludovic Rousseau wrote: Can you give me the extract of the CCID specs that says 271 is the minimal length? ok, didn't read the part about extended apdu. btw: what exactly is ICCD? also I wonder: 2048bit signatures with cryptoflex 32k cards in scm readers - they won't work with ccid + pcscd + o

Re: [opensc-devel] 2048 bit rsa problem

2006-11-14 Thread Ludovic Rousseau
On 13/11/06, Andreas Jellinghaus <[EMAIL PROTECTED]> wrote: I had a look at CCID spec 1.10 and - not sure - it seems this is no longer valid, dwMaxCCIDMessagelength has to be at least 271 bytes (and max 65544+10 bytes). but that doesn't help, it would be nice to get the hardware to work. Can yo