Re: [opensc-devel] CardOS 4.3

2010-06-10 Thread Andre Zepezauer
Dear Kerstin, today I have tried to reproduce to behaviour you described. But the result is, that everything works fine when using opensc release 0.11.13. I have CardOS 4.3b in use and the properties of my keys are as follows: Private Key Object; RSA Usage: decrypt, sign, unwrap Public Ke

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Northfield Stuart
On 10 Jun 2010, at 13:00, Emanuele Pucciarelli wrote: > What seems unlikely to me is mass storage encryption directly on the > device: I would guess that you need expensive hardware (at least, > expensive compared to ordinary smart cards) to perform decent > encryption at reasonable bitrates for

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Emanuele Pucciarelli
On Thu, Jun 10, 2010 at 14:20, Ludovic Rousseau wrote: > The advantage of using a HID interface instead of CCID is that, on > Windows, any user application can talk to a HID device without > installing a driver. > With a CCID interface and an old Windows (before Vista I think) you > have to insta

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Ludovic Rousseau
2010/6/10 Emanuele Pucciarelli : > Hello Jean-Michel, > >> Do you have any information on the work involved to add some HID >> protocol to OpenSC. Is HID protocol standard or would any solution be >> proprietary? > > Just trying to add my 2 cents: I am aware of tokens that expose a USB > hub with m

Re: [opensc-devel] CardOS 4.3

2010-06-10 Thread Kerstin.Horst
Hi, I am working on the SSO- and Signature-Framework at the Ruhr Universität. We recently tried to upgrade to version 0.11.13 but encountered some problems with the apdus sent for digital signature operations. CardOS 4.3 cards provide two commands for the same functionality, PSO_ CDS and PSO_DE

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Emanuele Pucciarelli
Hello Jean-Michel, > Do you have any information on the work involved to add some HID > protocol to OpenSC. Is HID protocol standard or would any solution be > proprietary? Just trying to add my 2 cents: I am aware of tokens that expose a USB hub with more than one device connected to it. Specifi

[opensc-devel] Published sources for Spanish DNIe opensc module

2010-06-10 Thread jons...@terra.es
Finally, here it is: http://www.dnie.es/descargas/codigo_fuente.html According to: http://www.kriptopolis.org/disponibles-fuentes-pkcs11 Seems that code doesn't include component private key to establish secure channel, but I thing that it can be found in other software (java/windows) provided

[opensc-devel] Incompatibilities with NSS since r4375

2010-06-10 Thread Andre Zepezauer
Hi folks, with changeset 4375 a new bug was introduced, which brakes applications looking up certificates by serial number. For example Mozilla Thunderbird. One consequence of this is, that at the moment it is impossible to read encrypted emails with the named email client using ope...@head.

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Anders Rundgren
Hi J-M, Are you sure that this is correct? Why would a vendor use HID when there is a generally supported Mass Memory class? HID is used by some USB stick vendors but for entirely different purposes like generating OTPs. Mass memory <> Human interface device. Regards Anders Jean-Michel Pouré -

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Jean-Michel Pouré - GOOZE
On Thu, 2010-06-10 at 11:30 +0200, Anders Rundgren wrote: > Are you sure that this is correct? Of course, I am not sure, as I don't have the spec in front of me. Leave me some time to enquire. Bye. -- Jean-Michel Pouré - Gooze - http://www.gooze.eu _

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Jean-Michel Pouré - GOOZE
On Thu, 2010-06-10 at 11:47 +0300, Martin Paljak wrote: > Do you mean HID as http://www.hidglobal.com/ or HID as > http://en.wikipedia.org/wiki/Human_interface_device ? I mean Human interface device, the USB class. -- Jean-Michel Pouré - Gooze - http://www.gooze.eu

Re: [opensc-devel] OpenSC support for HID token

2010-06-10 Thread Martin Paljak
On Jun 10, 2010, at 11:42 , Jean-Michel Pouré - GOOZE wrote: > Dear Friends, > > Per discussion with vendor, it seems that some token only support an HID > protocol. From a technical point of view, it allows to use the token as > an USB stick with 2GB to 8GB memory. This seems a nice idea, because

Re: [opensc-devel] RFC: Mac OS X installers for 10.5 and 10.6

2010-06-10 Thread Jean-Michel Pouré - GOOZE
On Wed, 2010-06-09 at 21:07 +0300, Martin Paljak wrote: > Please note that this is for core OpenSC only, no additional software > is bundled at the moment. I will test it ASAP as well as 0.11.14 and report. Kind regards, -- Jean-Michel Pouré - Gooze - http://www.gooze.eu _

[opensc-devel] OpenSC support for HID token

2010-06-10 Thread Jean-Michel Pouré - GOOZE
Dear Friends, Per discussion with vendor, it seems that some token only support an HID protocol. From a technical point of view, it allows to use the token as an USB stick with 2GB to 8GB memory. This seems a nice idea, because it allows to format and encrypt the stick using the same device. When

Re: [opensc-devel] Success with Omnikey

2010-06-10 Thread Xiaoshuo Wu
On Wed, 09 Jun 2010 19:13:18 +0800, Martin Paljak wrote: > This makes sense, with the exception that if it is possible to change > PIN flags afterwards, it should be possible the set them via command > line when creating the PIN as well. I'm a bit lost now how this relates > to profile in