Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
5
votes
3 answers

CAC Client Application Authentication in Python

I am building a python application to pull data from a website. The application has to authenticate(HTTPS/SSL) with a CAC card and pin in order to make requests. Am I correct in my assumptions that you can't retrieve the private key from a CAC card,…
Präriewolf
  • 829
  • 2
  • 9
  • 28
5
votes
2 answers

0x6f00 error casting Javacard Shareable Interface

I tried to use SIO (Shareable Interface Objects) for two different packages in order to update the business logic of my applet in future. I'm using eclipse, and I start two different JavaCard applications, ClientSIOApplet and ServerSIOApplet. There…
Hana Bzh
  • 2,212
  • 3
  • 18
  • 38
5
votes
0 answers

Java: mutual SSL using smartcard token?

I am currently working on a project that involves mutual SSL between a client and a server. I was able to do this using P12 and JKS files but am now required to do the same thing using a smartcard token. First I was quite confused that I could not…
steps0x29a
  • 61
  • 7
5
votes
1 answer

How to make php application to require smart card authentication

I can make browser to force authentication with smart card eg ID-card when php file is protected with SSLVerifyClient in apache conf. Now i need to display index.php usually without requiring smart card authentication and sometimes this same page…
Margus Pala
  • 8,433
  • 8
  • 42
  • 52
5
votes
2 answers

getting an android phone detected by an NFC reader/writer (Basic NFC)

If I have an NFC reader/writer device, can I get it to detect my NFC enabled android phone, so that I may be able to transfer data from my phone to the device? I have found some links on Stackoverflow related to card emulation but they all say that…
user13267
  • 6,871
  • 28
  • 80
  • 138
5
votes
0 answers

Java contactless smard card authenicate

I am new to nfc related development.i want to build java application which used to read and write secure element in mifare desfire ev1 smart card.so i found free library.but the problem is i want to authenticate the smart card first.so i created…
Sajith Vijesekara
  • 1,324
  • 2
  • 17
  • 52
5
votes
1 answer

Listing all Smart Card Readers on a system (Alcor Micro reader issues)

I've had this software running in production for years and never seen this problem before. I just received a new laptop (HP EliteBook 8470p) that has a built-in Alcor Micro USB Smart Card Reader. The code below will list all readers on a system…
Adam Plocher
  • 13,994
  • 6
  • 46
  • 79
5
votes
2 answers

Client Certificates and FireFox

I need some help to understand what is happening with my web application. I have a simple web app (c# .Net 2.0) that uses a smartcard authentication. In my testing box (win 2k3 32 bits, iis6) everything works fine but in my production box (win2k3…
GRGodoi
  • 1,946
  • 2
  • 24
  • 38
5
votes
1 answer

Java smart card access using middleware

I am working on migration of an old project to Java, and I am having some issues regarding smart card access. Due to lack of documentation I am forced to find my own way through this one, so I hoped you people can help me. I have a smart card and a…
Slobodan
  • 109
  • 1
  • 10
5
votes
6 answers

Difference between "EMV" and "Global Platform"

I would like to ask if someone of you know the difference between "EMV" and "Global Platform".
4
votes
4 answers

How to work with a Smart Card

My project I am working on a small program which has to set an alarm if the user locks the computer without removing the Smart Card from the computer. I am using C# with WPF and .Net 4.0 and my smartcard is version V4.2C My problem I have all the…
7heViking
  • 7,137
  • 11
  • 50
  • 94
4
votes
2 answers

Can I get public/private key pair from a key container in smartcard?

Can I get the public/private key pair from a key container inside a smartcard using PKCS #11 or CryptoAPI?
tandaica0612
  • 369
  • 10
  • 23
4
votes
1 answer

Windows Security dialog window pops up

Description of what the bug is We are developing at Windows 10. Our backend is ASP.NET Core 3.1 MVC Windows Security dialog window pops up while I am developing an application through React. It is really annoying. We have to refresh page. At first,…
Learner
  • 417
  • 6
  • 24
4
votes
2 answers

Smartcard API in C# that's Linux Friendly

I currently have a project that operates in Windows using P/Invokes to call the Smartcard API; however, since I've now open-sourced the project and put it on Google Code, I'd be interested in making it work for Linux peeps on Mono. The blockade to…
Olipro
  • 3,489
  • 19
  • 25
4
votes
0 answers

SmartCards in C# on Windows 10

I have a badge reader in my laptop and a smartcard badge. Following this guide from Microsoft, I can get the reader and set its CardAdded event. In the part about getting an authentication response, the guide mentions a rootPage that stores an…
John Mc
  • 212
  • 2
  • 16