Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 21:54 +, Mr Dash Four wrote: > > Opensc-explorer shows me the content of CIAInfo.bin without > > pin-verification. Does that answer your question? > > > Yeah, just about. Why do you think that is? Could this be a > manufacturer-related issue? No, that's a new bug in O

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
> Opensc-explorer shows me the content of CIAInfo.bin without > pin-verification. Does that answer your question? > Yeah, just about. Why do you think that is? Could this be a manufacturer-related issue? ___ opensc-devel mailing list opensc-devel@l

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 21:37 +, Mr Dash Four wrote: > >> 1. Generate a key file. I used: > >> - dd if=/dev/random of=~/master-key bs=1 count=2048 > >> - dd if=~/master-key of=~/key256 bs=1 count=256 > >> - dd if=~/master-key of=~/key512 bs=1 count=512 seek=256 > >> - dd if=~/master-key o

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
>> 1. Generate a key file. I used: >> - dd if=/dev/random of=~/master-key bs=1 count=2048 >> - dd if=~/master-key of=~/key256 bs=1 count=256 >> - dd if=~/master-key of=~/key512 bs=1 count=512 seek=256 >> - dd if=~/master-key of=/key1k bs=1 count=1024 seek=768 >> > > For what kind of a

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 20:10 +, Mr Dash Four wrote: > >> Your assumption was wrong! > >> > > > > Which command and parameters do you use to write the objects to the > > card? I'm using the current version from trunk, and there the behaviour > > is different. > > > 1. Generate a key file.

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
>> Your assumption was wrong! >> > > Which command and parameters do you use to write the objects to the > card? I'm using the current version from trunk, and there the behaviour > is different. > 1. Generate a key file. I used: - dd if=/dev/random of=~/master-key bs=1 count=2048 - dd

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 19:32 +, Mr Dash Four wrote: > > @MDF: > > Before making even more effort on storing data objects, you should > > definitely check if these objects are really private. My assumption is, > > they are not. > > > Your assumption was wrong! Which command and parameters do

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
> @MDF: > Before making even more effort on storing data objects, you should > definitely check if these objects are really private. My assumption is, > they are not. > Your assumption was wrong! > $pkcs15-tool -C > ... > Path: 3f0050153303(read 3f00/5015/3303) > ... > $opensc-exp

[opensc-devel] CardOS 4.4

2010-11-02 Thread Andre Zepezauer
Hello, today I have gotten some blank smart cards with CardOS 4.4. Sadly the software to personalise 4.3b doesn't work for the newer cards. Does anyone know, which software I need for personalisation? Regards Andre ___ opensc-devel mailing list opensc-

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 18:01 +, Mr Dash Four wrote: > > Should be the same for all cards. But it's better to use --slot-label > > instead of --slot. Because slot numbering may vary depending on reader > > configuration (i.e. different amount of readers attached to systems). > > > Noted! I ass

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
> Should be the same for all cards. But it's better to use --slot-label > instead of --slot. Because slot numbering may vary depending on reader > configuration (i.e. different amount of readers attached to systems). > Noted! I assume --slot-label is [a-zA-Z0-9] with no spaces, is that right?

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
> What is the module you are writing? An alternative to OpenSC (not OpenCT) > PKCS#11 module? > No. My module will allow opening of LUKS-encrypted partitions (including root partitions) at boot up time before the kernel loads using udev. Currently this is only possible with password authenti

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
Hello Martin, On Tue, 2010-11-02 at 18:53 +0200, Martin Paljak wrote: > On Nov 2, 2010, at 6:25 PM, Mr Dash Four wrote: > > Two general questions: > > > > 1) To retrieve a data object (previously stored with "pkcs15-init -P" > > etc) I use "pkcs11-tool -ry data --application-label XXX --slot YYY

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 16:25 +, Mr Dash Four wrote: > > @ALL: > > The 'pkcs15-tool' should possibly be changed to output the raw data as > > its default. That would not be that strange, because the unix command > > 'cat' does exactly the same. Therefore users should be prepared for it. > > >

Re: [opensc-devel] fixes #220

2010-11-02 Thread Martin Paljak
On Nov 2, 2010, at 6:25 PM, Mr Dash Four wrote: > Two general questions: > > 1) To retrieve a data object (previously stored with "pkcs15-init -P" > etc) I use "pkcs11-tool -ry data --application-label XXX --slot YYY" (if > this data object is public, if private I add the -l option as well) >

Re: [opensc-devel] fixes #220

2010-11-02 Thread Mr Dash Four
> @ALL: > The 'pkcs15-tool' should possibly be changed to output the raw data as > its default. That would not be that strange, because the unix command > 'cat' does exactly the same. Therefore users should be prepared for it. > That would be very wise! > @MDF: > Before making even more effor

Re: [opensc-devel] #252

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 09:05 +0100, Ludovic Rousseau wrote: > 2010/11/1 Andre Zepezauer : > > Hello, > > > > the pkcs15init tool currently writes to cards, even when the profile > > indication (3F00/5015/4946) isn't found. That's bad, because it's highly > > possible that such a card was personalise

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 14:43 +0100, Jean-Michel Pouré - GOOZE wrote: > Le mardi 02 novembre 2010 à 15:26 +0100, Andre Zepezauer a écrit : > > Before making even more effort on storing data objects, you should > > definitely check if these objects are really private. My assumption > > is, > > they ar

Re: [opensc-devel] fixes #220

2010-11-02 Thread Jean-Michel Pouré - GOOZE
Le mardi 02 novembre 2010 à 15:26 +0100, Andre Zepezauer a écrit : > Before making even more effort on storing data objects, you should > definitely check if these objects are really private. My assumption > is, > they are not. What is this smartcard your are talking about? --

Re: [opensc-devel] fixes #220

2010-11-02 Thread Andre Zepezauer
On Tue, 2010-11-02 at 01:40 +, Mr Dash Four wrote: > >> pkcs15-tool -r 1f645352 | grep -v '\-' | base64 -d > > Nope! It does not work even if I add the '-i' option on base64 - it > > generates more data - the resulting file is larger than the key > > itself. Key size is 256 bytes, output (

Re: [opensc-devel] #252

2010-11-02 Thread Ludovic Rousseau
2010/11/1 Andre Zepezauer : > Hello, > > the pkcs15init tool currently writes to cards, even when the profile > indication (3F00/5015/4946) isn't found. That's bad, because it's highly > possible that such a card was personalised with another library or has > an unknown profile. In my opinion there