Re: [opensc-devel] BT reader

2012-05-22 Thread Martin Paljak
On Tue, May 22, 2012 at 4:01 PM, NdK wrote: > Il 22/05/2012 14:32, Martin Paljak ha scritto: > >> Regarding PIN codes, communication is protected with AES, in addition >> to BT pairing. > How does the AES key exchange work? 'cause it's the weak link... > If the attacker can obtain the AES key (for

Re: [opensc-devel] BT reader

2012-05-22 Thread NdK
Il 22/05/2012 14:32, Martin Paljak ha scritto: > Regarding PIN codes, communication is protected with AES, in addition > to BT pairing. How does the AES key exchange work? 'cause it's the weak link... If the attacker can obtain the AES key (for example if it's printed on the unit and the attacker

Re: [opensc-devel] BT reader

2012-05-22 Thread Martin Paljak
Hello, On Mon, May 21, 2012 at 2:46 PM, NdK wrote: > Il 21/05/2012 10:50, j.witvl...@mindef.nl ha scritto: > >> Anyone around who had the chance to look at >> http://www.biometricassociates.com/products-baimobile/smart-card-reader-iphone-android.html >> I know that there exist for some time BT-r

Re: [opensc-devel] BT reader

2012-05-22 Thread helpcrypto helpcrypto
> You don't. It's useful to mount an attack against any BT sc reader (if > sc doesn't support sm, or reader doesn't implement some extra security > over bt). now i understand what you talking about...:P ___ opensc-devel mailing list opensc-devel@lists.op

Re: [opensc-devel] BT reader

2012-05-21 Thread NdK
Il 21/05/2012 14:11, helpcrypto helpcrypto ha scritto: >> http://ubertooth.sourceforge.net/ about ~100 EUR including shipping. > how do you insert the smartcard there?...and how to connect it to the > android/iphone? You don't. It's useful to mount an attack against any BT sc reader (if sc doesn't

Re: [opensc-devel] BT reader

2012-05-21 Thread helpcrypto helpcrypto
> http://ubertooth.sourceforge.net/ about ~100 EUR including shipping. how do you insert the smartcard there?...and how to connect it to the android/iphone? ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org

Re: [opensc-devel] BT reader

2012-05-21 Thread Peter Stuge
NdK wrote: > > BT-readers > > Urgh... I wouldn't use a BT reader unless the card uses SM. > It's trivial, if you sniff the pairing, to decode the whole BT > traffic. And non-SM cards receive the pin as cleartext. http://ubertooth.sourceforge.net/ about ~100 EUR including shipping. //Peter _

Re: [opensc-devel] BT reader

2012-05-21 Thread helpcrypto helpcrypto
This might be interesting: http://www.apriva.com/products/iss/authentication/reader Priced 150€ +/- ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] BT reader

2012-05-21 Thread NdK
Il 21/05/2012 10:50, j.witvl...@mindef.nl ha scritto: > Anyone around who had the chance to look at > http://www.biometricassociates.com/products-baimobile/smart-card-reader-iphone-android.html > I know that there exist for some time BT-readers, but those from RIM present > themselves only as a `

[opensc-devel] BT reader

2012-05-21 Thread J.Witvliet
Hi, Anyone around who had the chance to look at http://www.biometricassociates.com/products-baimobile/smart-card-reader-iphone-android.html I know that there exist for some time BT-readers, but those from RIM present themselves only as a `rim` device. These are probably not as cheap as an ordin