Re: [opensc-devel] General back ground information on National ID cards

2007-05-22 Thread Stef Hoeben
Hi, here's the status for Belgium: About 5.000.000 citizens have their cards now, and within about 2 years or so everyone above 12 should have one (total population: about 11.000.000) There's an authentication and a nonrep key on the card (the last one not supported by OpenSC because of a lack o

[opensc-devel] No signatures with message recovery in our pkcs11]

2006-10-30 Thread Stef Hoeben
Hi, here a little fix for http://www.opensc-project.org/opensc/ticket/47 (More specifically, set the SIGNRECOVER and VERIFYRECOVER flags to false, untill some needs it and implements it. Any objections? Also about http://www.opensc-project.org/opensc/ticket/71: perhaps it's better to ad

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [2968] Added support for MuscleCard applet.

2006-06-27 Thread Stef Hoeben
Nils Larsch wrote: Stef Hoeben wrote: Hi, +void ulong2bebytes(u8 *buf, unsigned long x) +{ +buf[3] = (u8) (x % 256); +x /= 256; +buf[2] = (u8) (x % 256); +x /= 256; +buf[1] = (u8) (x % 256); +buf[0] = (u8) (x / 256); +} I would prefer #define ULONG2BEBYTES(p, x

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [2968] Added support for MuscleCard applet.

2006-06-25 Thread Stef Hoeben
Hi, +void ulong2bebytes(u8 *buf, unsigned long x) +{ +buf[3] = (u8) (x % 256); +x /= 256; +buf[2] = (u8) (x % 256); +x /= 256; +buf[1] = (u8) (x % 256); +buf[0] = (u8) (x / 256); +} I would prefer #define ULONG2BEBYTES(p, x)do {\ (p)[3] = (x) & 0xff;\ (p)[

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [2968] Added support for MuscleCard applet.

2006-06-24 Thread Stef Hoeben
Hi, yes, getting rid of the endian #defines is one thing. But the edian things are only used for converting an unsigned long into a 4-byte array in big-endian notation and vice versa (+ idem for unsigned shorts) in the following way: - swap unsigned long if needed - memcpy(byte array, &(th

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [2968] Added support for MuscleCard applet.

2006-06-19 Thread Stef Hoeben
Hi, ack. Guess it would be nicer to replace the "change into a bigendian buf" code by some code that doesn't check for endian-ness. E.g. to replace the following code if (BIG_ENDIAN) x = bswap_32(x); memcmp(buffer, &x, 4); by write_bigendian(buffer, x); where static

[opensc-devel] Re: [Fwd: Re: [Fwd: Patch file for muscle-card support in Opensc]]

2006-06-18 Thread Stef Hoeben
Hi Thomas, OK, patch applied, thanks. For Wiki access, you should ask Andreas. Or otherwise send the info to me then I'll put it the Wiki. Cheers, Stef Thomas Harning wrote: On Mon, 12 Jun 2006 22:37:05 +0200 Stef Hoeben <[EMAIL PROTECTED]> wrote: Hi, the MuscleCard appl

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [2968] Added support for MuscleCard applet.

2006-06-17 Thread Stef Hoeben
Hi Martin, indeed, things don't build on Mac. You'll commit, or want me to do so? Cheers, Stef Martin Paljak wrote: To build on intel mac attached patch was needed for me (endian.h portability from google gives more insight and alternatives) Also removed are some unused header files from c

[opensc-devel] [Fwd: Re: [Fwd: Patch file for muscle-card support in Opensc]]

2006-06-12 Thread Stef Hoeben
Hi, the MuscleCard applet seems to work nicely. Here some additional questions: If you 'personalize' the applet with 00A4040006A101 B02A38084D7573636C6530300401083030303030303030083030303030303030 0502 083030303030303030083030303030303030177201 - then you have to start wi

Re: [opensc-devel] Muscle Card Support Patch

2006-06-04 Thread Stef Hoeben
Hi Thomas, looks impressive :-) * Your patch doesn't seem to contain an implementation for _byteswap_ulong() and _byteswap_ushort(); and those functions are not on my MS Visual Studio 6.0? Guess the following change should be OK (assuming all Windows machines are Little Endian..) #define

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [2940] if the card doesn't support a logout functionality it's not an error

2006-05-07 Thread Stef Hoeben
Martin Paljak wrote: On 05.05.2006, at 12:10, [EMAIL PROTECTED] wrote: if the card doesn't support a logout functionality it's not an error Actually, when doing some debugtesting with the Estonian eID card, threading and locking and so on, i found the fact that the default logout funct

Re: [opensc-devel] Belgium "Belpic" Card

2006-05-02 Thread Stef Hoeben
Hi Arijen, Arijen Geerts wrote: Hi all, I do not know if you are able to help me but will give it a try. Currently I need to write my finals at University and decided to write about national identity cards. Since I am Belgium citizen I am focussing on the Belpic card. I got/collected al

Re: [opensc-devel] DSA, ECDSA

2006-04-24 Thread Stef Hoeben
Hi, Bruce Stephens wrote: Looking through engine-pkcs11, and then libp11, it looks like they don't support anything much except RSA. That's not an immediate problem (since I don't have any cards that would support anything except RSA), but is there any stronger reason than that? It looks l

Re: [opensc-devel] ACL of PKCS15-CDF incorrectly set to NONE

2006-04-05 Thread Stef Hoeben
Nils Larsch wrote: Stef Hoeben wrote: Hi, there seem to be 2 problems: - protect_certificates = false by default -> nasty security bug IMHO, this is fixed in profile.c It's certainly a bug but I don't think this is a real security problem (unless you can you describe a pra

Re: [opensc-devel] ACL of PKCS15-CDF incorrectly set to NONE

2006-04-04 Thread Stef Hoeben
Hi, there seem to be 2 problems: - protect_certificates = false by default -> nasty security bug IMHO, this is fixed in profile.c PS: The flex.profile sets this value to true, but setting it to false seems to work fine for me (so I propose to remove it -> OK???) - no reference to th

Re: [opensc-devel] Interfacing eToken Pro/OpenSC with Apple Keychain

2006-03-02 Thread Stef Hoeben
tommytian wrote: I have two targets : 1. Create a PKCS7 message using certificate and private key store in aladdin etoken on Mac OS X 10.3 and 10.4. 2. Create a PKCS7 message using certificate and private key store in Mac OS X KeyChain Store.User can use Mac Tool that named Keychain Access to v

Re: [opensc-devel] how to use size_t in a printf?

2006-03-02 Thread Stef Hoeben
Nils Larsch wrote: Andreas Jellinghaus wrote: Am Donnerstag, 2. März 2006 17:22 schrieb Nils Larsch: I vote for printf("... %lu ...", (unsigned long) whatever, ...); I googled, and the options are %lu or %zu, the first is C89-portable (could cause problems in theory, where size_t != us

Re: [opensc-devel] gtkcard: graphical tool above a PKCS#11 lib

2006-02-28 Thread Stef Hoeben
Hi Ludovic, you have a GTK project file? That way it might be easy to get it built on Windows. Also: guess there's no separate GUI for asking PINs (that could be called from within libopensc or so)? Cheers, Stef Ludovic Rousseau wrote: Hello, Identity Alliance donated the gtkcard applicatio

[opensc-devel] Changing attributes in pkcs15-init tool?

2006-02-27 Thread Stef Hoeben
Hi, some months ago, I added a sc_pkcs15init_change_attrib() function in the pkcs15-init lib to change the label and id of a pkcs15 object. And, I believe, also an option to the pkcs15-init tool that calls this function. However, I can't find that back option. If someone removed the option, pls