Search

tay00000

JavaCard standards have not really supported non-ECC/traditional Diffie-Hellman algorithm up till only recently (JC 3.0.5). Anyone who wants to use Diffie-Hellman have to do them manually or simply avoid using the traditional non-ECC Diffie-Hellman. Here is a Diffie-Hellman library found on Github t...

tay00000

KeyBuilder argument has a parameter for "keyType" in it's "buildKey" function. You specify one that is transient. How you should call KeyBuilder is something like: // For transient memory AES key private AESKey myRAMKey = KeyBuilder.buildKey(KeyBuilder.TYPE_AES_TRANSIENT_RESET, K...

tay00000

There is an increase in attempts to move a traditional smart card into a USB form factor and especially with the FIDO authentication protocol, more smart card solution providers are creating more USB smart cards. The JavaCardOS shop sells Feitian's eJavaToken and it's a good initial move. I would li...

tay00000

Please read the GlobalPlatform specification linked below for more details on Card Manager keyset. It is beneficial for beginners to have an understanding on how GlobalPlatform standards and it's specifications work. Will there be backdoors where your card issuer/IC manufacturer can patch some nasty...

tay00000

A sample use case for this method: - Dual-interface card for office door access applet with email and document signing applet in same card. - Door access via ISO14443 but email and document signing should not be conducted over ISO14443 due to the sensitive nature of email and document security. - Do...

tay00000

This is a HOW-TO on preventing communication over ISO14443 interface on a dual-interface card in an event you do not want to receive APDUs over ISO14443. Security issues might arise if anyone is given free access to ISO14443 contactless interface. In the event where you absolutely do not want someon...

tay00000

What type of web application are you interested in for Smart Card ? Have you considered using PKCS#11 if you are looking into web based certificate authentication for clients ? It is very difficult to get a browser to talk to a smart card directly even with middleware because you have to write a bro...

tay00000

Hi. It would be nice if more details can be found on the JC10M24R card. What I am interested in knowing: - available ROM capacity (since the EEPROM is so small I assume the ROM should be huge) for customizing. - AES support includes AES with 256-bit key and CBC mode ? - Any HMAC support available ? ...

tay00000

Yup. It's working now. Maybe I mixed up all the different variants openpgpapplet while in an attempt to debug and install one out of the many versions for my own use.

tay00000

A new update on the situation. I have retried to download again and now it manages to be loaded. Either the previous download was problematic or a wrong CAP file was loaded. Manage to load OpenPGP applet with latest A22CR successfully. Here's my finding on the compatibility on the many versions of O...

Search found 161 matches

The Algorithm of traditional Diffie-Hellman

Re: Store data in EEPROM or RAM?

Creation of a USB chip contact card product line at low cost

Re: Extract applet from java card

Re: How To: Prevent communication over ISO14443 on a dual-interface card

How To: Prevent communication over ISO14443 on a dual-interface card

Re: interact with JavaCard in web application

Details on the JC10M24R

Re: Problem installing OpenPGP applet onto A22CR card

Re: Problem installing OpenPGP applet onto A22CR card

Board Disclaimer