Re: [opensc-devel] CA key on card: how?

2011-02-22 Thread NdK
On 21/02/2011 14:03, Christian Hohnstaedt wrote: XCA 0.8.x used the engine_pkcs11. Ok. In Mandriva I had only 0.8.1 rpm. In version 0.9.0, I dropped the need of engine_pkcs11 and use the signing routines of the pkcs11 lib directly. Mainly to support multiple PKCS11 provider in parallel. So

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-22 Thread Toni Sjoblom - Aventra
Hi, -Original Message- From: NdK [mailto:ndk.cla...@gmail.com] On 15/02/2011 11:17, Toni Sjoblom - Aventra wrote: Current MyEID cards are 80K, but some of this space is used by the MyEID applet itself. The file size you see in the 3F00 file is the remaining free space,

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-22 Thread NdK
On 22/02/2011 13:56, Toni Sjoblom - Aventra wrote: The private key files sizes are shown in bits not bytes. A 1K private key uses approx. 960 bytes and 2K respectively approx. 1296 bytes. This consists of both the private and public parts. This matches my experimental numbers better :) 28548

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-22 Thread Toni Sjoblom - Aventra
Hi, -Original Message- From: opensc-devel-boun...@lists.opensc-project.org [mailto:opensc-devel- On 22/02/2011 13:56, Toni Sjoblom - Aventra wrote: The private key files sizes are shown in bits not bytes. A 1K private key uses approx. 960 bytes and 2K respectively approx. 1296

Re: [opensc-devel] PKCS#11 C_DeriveKey for ECDH1_COFACTOR_DERVIVE for PIV cards

2011-02-22 Thread Douglas E. Engert
On 2/22/2011 1:16 AM, Martin Paljak wrote: Hello, On Feb 21, 2011, at 10:23 PM, Douglas E. Engert wrote: I would like to C_DeriveKey support to OpenSC, to the derivation capabilities of a smartcard. Although RSA can do key derivation, I am interested in CKM_ECDH1_COFACTOR_DERIVE which is

Re: [opensc-devel] Implement PIN retries in entersafe driver

2011-02-22 Thread Martin Paljak
Hello, On Tue, Feb 22, 2011 at 07:31, Xiaoshuo Wu xiaos...@ftsafe.com wrote: Index: src/libopensc/card-entersafe.c === --- src/libopensc/card-entersafe.c      (revision 5121) +++ src/libopensc/card-entersafe.c      (working copy)

[opensc-devel] About 'SC_PKCS15_CARD_FLAG_FIX_INTEGERS'

2011-02-22 Thread Viktor TARASOV
Hello, Some of the natively PKCS#15 cards are concerned with the same problem of invalid reference ASN.1 encoding as it's the case with the StarCOS cards formated with OpenSC before 0.11.4 . Actual fix is conditioned only for StarCOS cards.

[opensc-devel] On xxx_transmit_apdu (was RE:Implement PIN retries in entersafe driver)

2011-02-22 Thread Juan Antonio Martinez
As the wrapper is used for built-in APDU ciphering and mac-ing, you should instead propose a solution for the secure messaging infrastructure in OpenSC (ItaCNS, DNIe, IAS/ECC, Feitian have code that deals with it). As you use builtin keys for only specific APDU-s this should be the

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-22 Thread NdK
On 22/02/2011 15:41, Toni Sjoblom - Aventra wrote: Sorry, the public key size for the 2K was missing from that value. That explains the 320 bytes difference. Public key file for a 2K bit key is 270 bytes. Also, some space is occupied when new files are added as well. Ok. So 32 2048bit