Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-11 Thread Anders Rundgren
If the keystore process uses sockets (SKS uses Web Services over sockets), you could achieve trusted path detection in Linux without any significant programming at all: http://welz.org.za/notes/on-peer-cred.html This scheme is for example used by PostgreSQL for their ident authentication scheme.

[opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Anders Rundgren
Is there any support for trusted (OS-level) PIN input in OpenSC? Or is this supposed to be catered for by separate PIN-pads only? I expect this feature will be standard in mobile devices. Google have even managed to support trusted path in their wallet application. I don't know anything how this

Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Martin Paljak
Hello, On Mon, Oct 10, 2011 at 12:27, Anders Rundgren anders.rundg...@telia.com wrote: Is there any support for trusted (OS-level) PIN input in OpenSC? Trusted path for me means guaranteed by tamper-proof mechanisms, which usually means separate hardware-guaranteed channel, which in turn would

Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Anders Rundgren
On 2011-10-10 12:05, Martin Paljak wrote: Hello, On Mon, Oct 10, 2011 at 12:27, Anders Rundgren anders.rundg...@telia.com wrote: Is there any support for trusted (OS-level) PIN input in OpenSC? Trusted path for me means guaranteed by tamper-proof mechanisms, which usually means separate

Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Frank Morgner
On Monday, October 10 at 12:43PM, Anders Rundgren wrote: On 2011-10-10 12:05, Martin Paljak wrote: Hello, On Mon, Oct 10, 2011 at 12:27, Anders Rundgren anders.rundg...@telia.com wrote: Is there any support for trusted (OS-level) PIN input in OpenSC? Trusted path for me means