Search

sakkiotto

mabel wrote:What CAP component did you modify?

I just change one byte at will. And I am not clear that which component I modified? How can I confirm that?

sakkiotto

Recently, I am working on java card security study. The first test I would like to do is trying to load a modified CAP file into java card. I modify one byte of the CAP file at will via WinHex. What make me strange is that my modified CAP file can still be uploaded and installed with its standard me...

sakkiotto

I have to encrypt data with 3DES algo in my applet. I also need to decrypt the data in my host application. And the key for 3DES should be 24 bytes, anyone can figure out how to extend the 16 byte key to 24 byte key? Here is my code cipherDES = Cipher.getInstance(Cipher.ALG_DES_CBC_ISO9797_M1, false...

sakkiotto

I am trying to implement SCP02 i=15, I can calculate the C-MAC with DES for the external authenticate command without any problem, but I can not calculate the C-MAC for the second command with the same algorithm. Anyone know where the problem exists?

sakkiotto

The steps are much the same as the explicit, except that there is no INIT-UPDATE/EXT-AUTH commands to deal with. When the first secured APDU is received (CLA = 0x84), follow the process to generate session keys and verify the MAC. The card spec outlines how to generate a MAC with the session keys.

sakkiotto

I still have a question. I wonder how to add a JavaCard3.0 to a mobile phone.

Is it possible to buy a java card (JC3.0) that uses the microSD card reader on phone?

sakkiotto

Will it be possible to write a JavaME application which can send http request to JavaCard 3.0 and using JavaCard for strong authentication?
I suppose I also have to write a web application and deploy on the JavaCard. Any tips?

sakkiotto

You could just use the value that you find in the JC2.2.2 version for the constant ALG_HMAC_SHA1 (= (byte)24) and pass it to the Signature.getInstance() method. So using the value is not a problem. However, the smartcard must support this algorithm in order for you to be able to use. @horse dream ,...

sakkiotto

I know I can call JCSystem.getAvailableMemory(MEMORY_TYPE_PERSISTENT) to get the remaining persistent memory of my card. But if the card's memory is over 32767 bytes, how can I get the exact value?

sakkiotto

My javacard version is JC2.2.1 for which signature class doesn't include ALG_HMAC_SHA1 method. To my best knowledge, it includes this method after JC2.2.2. So is it possible to use this method without upgrading my card JC version?

Search found 12 matches

Re: A modified CAP file can be installed w/o any problem?

A modified CAP file can be installed w/o any problem?

3DES Key

CAN'T calculate C-MAC

Re: mechanism of secure channel initiation on mode explicit

How to add a JavaCard3.0 to a mobile phone

Strong authentication and JavaME apps

Re: Is it possible to use ALG_HMAC_SHA1 in JC2.2.1?

How can I get exact memory value if it's over 32767 bytes?

Is it possible to use ALG_HMAC_SHA1 in JC2.2.1?

Board Disclaimer