Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-24 Thread Martin Paljak
Hello, On Dec 23, 2010, at 10:56 AM, francois.lebl...@cev-sa.com wrote: > This patch simply break the use of westcos 2ko cards used for key transports > facility not > for hight security level... If you need to store keys for transportation purposes, you can use either data objects to store stuf

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-23 Thread francois . leblanc
Hello,This patch simply break the use of westcos 2ko cards used for key transports facility notfor hight security level...I don't understand why this can be let in place since like I said or I would like said I provide my owncustom build to the users of westcos cards 2ko so it's ok for me if offici

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-13 Thread Andre Zepezauer
On Mon, 2010-12-13 at 13:09 +0200, Martin Paljak wrote: > Hello, > > On Dec 13, 2010, at 10:02 AM, Andre Zepezauer wrote: > > attached is the missing patch. It removes the RSA faking, but leaves > > everything else as is. > > Looks reasonable. > > > > BTW: Is the source code of that applet publi

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-13 Thread Martin Paljak
Hello, On Dec 8, 2010, at 9:35 AM, francois.lebl...@cev-sa.com wrote: > For know I don't have patch for removing software operation on westcos, Andre created one, can you see if it works (or document what it breaks) ? > This is needed until westcos with cryptographics becomes available... > > But

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-13 Thread Martin Paljak
Hello, On Dec 13, 2010, at 10:02 AM, Andre Zepezauer wrote: > attached is the missing patch. It removes the RSA faking, but leaves > everything else as is. Looks reasonable. > > BTW: Is the source code of that applet publicly available. If so, it > shouldn't be that hard to add the cryptographic

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-13 Thread Andre Zepezauer
an build without openssl > > I will provide one for westcos user... > > It is ok for you this way? > > François. > > > > De : > Martin Paljak > A: > Andre Zepezauer > Cc : > opensc-devel > Date: > 07/12/2010 19:38 > Objet : > R

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-07 Thread francois . leblanc
s way? François. De : Martin Paljak A: Andre Zepezauer Cc : opensc-devel Date: 07/12/2010 19:38 Objet : Re: [opensc-devel] westcos still fakes crypto hardware Envoyé par : opensc-devel-boun...@lists.opensc-project.org Hello, On Dec 7, 2010, at 8:25 PM, Andre Zepezauer wrote: > Hello,

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-07 Thread Peter Stuge
Andre Zepezauer wrote: > > > support for GSM/UMTS SIM cards? > > Do you know LGPL compatible A5/1 libraries ? :) > > Only GPL, but really amazing: > http://openbsc.osmocom.org/trac/ It's lots of fun. Also see OsmocomBB, software running on an MS (a phone). There is also SIM interfacing, I'm not

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-07 Thread Andre Zepezauer
On Tue, 2010-12-07 at 20:38 +0200, Martin Paljak wrote: > Hello, > On Dec 7, 2010, at 8:25 PM, Andre Zepezauer wrote: > > > Hello, > > > > the westcos driver still fakes crypto-hardware. It first extracts the > > key material from the card and than performs the crypto operations in > > software.

Re: [opensc-devel] westcos still fakes crypto hardware

2010-12-07 Thread Martin Paljak
Hello, On Dec 7, 2010, at 8:25 PM, Andre Zepezauer wrote: > Hello, > > the westcos driver still fakes crypto-hardware. It first extracts the > key material from the card and than performs the crypto operations in > software. Following that schema, then every card could easily support > every cryp

[opensc-devel] westcos still fakes crypto hardware

2010-12-07 Thread Andre Zepezauer
Hello, the westcos driver still fakes crypto-hardware. It first extracts the key material from the card and than performs the crypto operations in software. Following that schema, then every card could easily support every crypto-algorithm. OpenSSL would make it possible. What would be the next th