Re: [opensc-devel] Securing a 3DES key on smartcard

2012-01-04 Thread Douglas E. Engert
On 1/1/2012 4:03 PM, Jean-Michel Pouré - GOOZE wrote: > Dear all, > > Is there a way to store a 3DES key on smartcard, so it cannot be > extracted but still be usable by OpenSSL? > > We wrote this; > http://www.gooze.eu/howto/smartcard-quickstarter-guide/scenario-5-importing-3des-key > > pkcs11-t

Re: [opensc-devel] Securing a 3DES key on smartcard

2012-01-02 Thread Nikos Mavrogiannopoulos
2012/1/2 Jean-Michel Pouré - GOOZE : > Dear all, > Is there a way to store a 3DES key on smartcard, so it cannot be > extracted but still be usable by OpenSSL? PKCS #11 allows that but opensc didn't support secret keys last time I checked. Symmetric keys in smart-cards could be useful for Kerberos

Re: [opensc-devel] Securing a 3DES key on smartcard

2012-01-01 Thread Peter Stuge
Jean-Michel Pouré - GOOZE wrote: > Is there a way to store a 3DES key on smartcard, so it cannot be > extracted but still be usable by OpenSSL? Maybe some card supports it, but usually it is undesirable for performance reasons. Symmetrical ciphers are usually intended for large amounts of data, s

[opensc-devel] Securing a 3DES key on smartcard

2012-01-01 Thread Jean-Michel Pouré - GOOZE
Dear all, Is there a way to store a 3DES key on smartcard, so it cannot be extracted but still be usable by OpenSSL? We wrote this; http://www.gooze.eu/howto/smartcard-quickstarter-guide/scenario-5-importing-3des-key pkcs11-tool -v --module /usr/lib/opensc-pkcs11.so --slot 1 --label "3deskey" --