[opensc-devel] RE : OpenSC and Debug with Visual Studio

2010-09-16 Thread JEAN Guillaume
Hello, Yes I try to work more Foreign Languages. :-) Now with revision 4723 I have a problem for run cardmod. I try to find bug but it's difficult :-) I have this error SCARD_E_SHARING_VIOLATION. with this log 2010-09-16 11:33:51.413 PC/SC options: connect_reset=1 connect_exclusive=0 transa

[opensc-devel] 'Sign by Decryption' and CardOS

2010-09-16 Thread Viktor TARASOV
Hi, I would like to advance the ticket #151, this ticket needs the clarification of the 'Sign by Decryption' status. As it actually implemented, sign-by-decrypt uses on the card level the same command as for the 'PSO DEC' operation. Probably it works for other cards, but not for CardOS. (I use

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-16 Thread Andre Zepezauer
Hello Viktor, there are two distinct properties of CardOS, which I belief you have mixed. On key generation time one has to decide: 1. if the key can be used with sign or decipher (but not both) 2. the padding algorithm the card performs when executing a security operation with the generated k

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-16 Thread Viktor TARASOV
Hello Andre, Andre Zepezauer wrote: > Hello Viktor, > > there are two distinct properties of CardOS, which I belief you have > mixed. On key generation time one has to decide: > > 1. if the key can be used with sign or decipher (but not both) > 2. the padding algorithm the card performs when execu

Re: [opensc-devel] Call for testing of the upcoming 0.12.0 release

2010-09-16 Thread Peter Koch
Hi Martin; The TCOS driver marks the user PIN as unblocking PIN [3], which I believe is > incorrect (only PUK should have the unblocking code flag set) > > The attached patch should fix this. Peter, please add your comment. > PKCS#15-spec says: PinAttributes.pinFlags: This field signals whether

[opensc-devel] Reading partial objects responds differently when T=0 vs T=1

2010-09-16 Thread Douglas E. Engert
I ran into a problem when using an older PIV card that uses T=0 with the newer PIV code since 0.11.9. The code attempt to read in the first 8 bytes of an object using the PIV card GET_DATA command. This is done to get the length of the object and test if the object is present, without having to r

Re: [opensc-devel] FOSDEM 2011: february 5th and 6th

2010-09-16 Thread Peter Koch
Hi Andreas and Jean-Michel! > I always wanted to go to FOSDEM conference in Brussels, Belgium. > > Next year the conference will be on 5th and 6th of february. > > > Maybe more people on this list are interested in going there > > and meeting up, and maybe having a devroom, a talk, or whatever > >

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-16 Thread Andre Zepezauer
On Thu, 2010-09-16 at 19:21 +0200, Viktor TARASOV wrote: > Hello Andre, > > Andre Zepezauer wrote: > > Hello Viktor, > > > > there are two distinct properties of CardOS, which I belief you have > > mixed. On key generation time one has to decide: > > > > 1. if the key can be used with sign or deci

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-16 Thread Andre Zepezauer
Hello Viktor, > > Besides the sigh_with_decipher hack there is another problem which > > arises when on card pkcs15 structure states only one operation per key. > > > It's the subject of the next enhancement. > I suggest something like > http://www.opensc-project.org/opensc/browser/branches/vta

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-09-16 Thread Andre Zepezauer
On Tue, 2010-08-31 at 10:14 +0200, Viktor TARASOV wrote: > Andre Zepezauer wrote: > > On Mon, 2010-08-30 at 17:50 +0200, Viktor TARASOV wrote: > > > >> Hello, > >> > >> > >> Andre Zepezauer wrote: > >> > >>> Hello, > >>> > >>> attached is a patch which makes it possible to explicitly reques

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-16 Thread Ludovic Rousseau
2010/9/17 Andre Zepezauer : > On Thu, 2010-09-16 at 19:21 +0200, Viktor TARASOV wrote: >> PSO_DEC do not support the chaining and to perform decryption with >> RSA2_PURE 2048bits the support of extended APDUs is needed. >> For a while it do not works for me. > > It works! Check that your reader su