Page 1 of 1

JC 3.1

Posted: Tue Mar 12, 2019 11:06 pm
by tay00000
Oracle has recently released JavaCard version 3.1.

JC 3.1 Main Website: https://docs.oracle.com/en/java/javacard/3.1/index.html

JC 3.1 API: https://docs.oracle.com/en/java/javacar ... index.html

Enjoy :D !!!

Re: JC 3.1

Posted: Tue Mar 12, 2019 11:20 pm
by tay00000
Table - New Features in Java Card API Specification

New Feature...........|.....Description
-------------------------------------------------------------------
AES ciphering
modes.....................Added support for AES-CFB mode for stream ciphering and AES-XTS mode for secure storage.
-------------------------------------------------------------------
Configurable
asymmetric key
generation...............Added additional parameters for key generation to configure the primality test or the random number generator.
-------------------------------------------------------------------
Named Elliptic
Curves...................Added support for named curves curves allowing an application to reuse the predefined curves domain parameters by ...........................specifying the name rather than configuring the parameters values for each of the individual key.
-------------------------------------------------------------------
Support for
X25519 and
X448 key
agreement
schemes................. Implemented key agreement schemes using Curve25519 and Curve448 as described in RFC 7748
-------------------------------------------------------------------
Support for
Ed25519 and
Ed448 digital
signature schemes.....Implemented cryptographic signatures using the Edwards-Curve Digital Signature Algorithm (EdDSA) as described in RFC 8032.
-------------------------------------------------------------------
Support for SM2,
SM3 and SM4
Chinese algorithms....Implemented SM2 elliptic curve digital signature, SM2 key exchange, SM2 public key encryption, SM3 hash algorithm, and SM4
...........................block cipher algorithm.
-------------------------------------------------------------------
Pseudo Random
Functions and Key
Derivation Functions..Added an API to support common pseudo random functions and key derivation functions.
-------------------------------------------------------------------
Certificate API.........Added an API to parse, store, and manage X.509 DER encoded certificates.
-------------------------------------------------------------------
Monotonic Counter
API.......................Added an API to manage the monotonic counters securely.
-------------------------------------------------------------------
System Time API......Added an API to manage system uptime and perform operations on time durations.
-------------------------------------------------------------------
Extended I/O
framework..............Included abstractions for the third-party extensions to access different I/O communication models or peripherals.
-------------------------------------------------------------------

***Note:
- It is very important to note that JC 3.1 now supports the highly sought after X25519/X448 and Ed25519/Ed448 ECC schemes that everyone has
been asking for.
- Chinese SM algorithms are now officially recognized as supported ciphers
- KDF to derive keys for secure import are now included
- Monotonic Counter are added for secure 'eFuses' to ensure post issuance security sensitive counters cannot be reversed or reset after use (i.e.
key usage counters)

Re: JC 3.1

Posted: Wed Mar 13, 2019 10:19 pm
by Tolice
It's great! thanks your share. @tay00000

Re: JC 3.1

Posted: Fri Aug 16, 2019 11:41 am
by aventures
Thank you for sharing tay00000.

Has anyone identified a manufacturer having these JavaCard version 3.1 features in their products?

Re: JC 3.1

Posted: Tue Dec 17, 2019 5:53 am
by tay00000
I am not sure if any manufacturer have successfully moved beyond JC 3.0.4 officially despite JC 3.0.5 and JC 3.1 specifications being generally available in the public.

Re: JC 3.1

Posted: Thu Jan 09, 2020 2:59 am
by priyamehta
very well explained.