12 Jan
2011
12 Jan
'11
4:33 p.m.
On Wed, Jan 12, 2011 at 03:15:38PM +0100, Alain Knaff wrote:
On 12/01/11 14:46, Lionel Elie Mamane wrote:
> I'm pleased to report that I've
developed a free software driver /
> middleware for LuxTrust-issued smartcards. Details at
> http://c3l.lu/wiki/index.php/Luxtrust#Using_Open_source_tools
This is great news, congratulations! This is useful
not only for 64 bit
processors, but also for non-Intel Linux devices such as the Nokia N900.
I suppose this works both for the credit-card sized smartcards and for the
"signing sticks" (which take a SIM-sized chipcard)?
Yes. From the software POV, the SIM-sized smartcard and the
credit-card sized smartcard are identical; they present the same ATR.
The only difference I could see is the size of the keys on it; if
memory serves me right the SIM-sized smartcards have 2048 bit keys and
the credit-card smartcards 1024 bit keys.
I find that rather ironic, as the credit-card sized smartcards are
advertised as slightly "more secure" by LuxTrust.
Just out of curiosity: how did you manage to do this,
how did you
(or Georges Bart) get the necessary information for this
development?
Georges Bart: I don't know. Me: Well, I spied on the communication
between the binary-only driver and the smartcard, and with the help of
some "leaked" parts of (an older version) of the ISO standard on
(crypto) smartcards, which the smartcard *partially* follows, I made
sense of the stream of bytes and configured my driver to do the same.
As Lilux, we have had contacts with Luxtrust (...)
Back then, they
agreed that _if_ a 64 bit driver was available from another source,
they would also follow with their libraries (... )
Great!
it might now be interesting to take up contact again.
Our emails on that crossed each other. Yes, by all means!
Btw, I had a peek in Gemalto's own drivers (using
a crude
decompiler), and apparently they heavily use OpenSC themselves...
They acknowledge that in their license / copyright file. However, they
do not obey OpenSC's license fully: they do not give us .o files for
their binary-only parts, so that we could relink it against a newer
version of OpenSC, which might actually make their binary-only driver
work on newer GNU/Linux systems (e.g. it does not work with Debian
"lenny" 5.0, only with Debian "etch" 4.0).
--
Lionel