Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
4
votes
1 answer

Sending and receiving data using same T=1 APDU

I'm trying to send an APDU that contains some command data, and then expect some data in response from the card. I'm using this example code by Ludovic Rousseau as a starting to point (modified code below). The APDU I'm sending is the…
Joost
  • 4,094
  • 3
  • 27
  • 58
4
votes
1 answer

Does DESKey preserve invalid parity bits?

According to DES specification, the last bit of each byte of the secret key is used for error detection (each byte should have odd parity). Hence the effective key length is 56 bits, not 64 bits. However, in many use cases these parity bits are not…
vojta
  • 5,591
  • 2
  • 24
  • 64
4
votes
1 answer

The smart card is not responding to a reset

I have been working of the read / write operation of smart cards, I believe my card is sle_4428 and I am using HID OMNIKEY 3121 USB Card Reader. The problem is that when I enter card in card reader my program responds as the smart card is not…
Darab Javaid
  • 145
  • 2
  • 13
4
votes
1 answer

Using smartcard credentials, obtained by a webpage

I have two servers on a Windows domain that include an active directory that is correctly configured to allow users to login using smartcard credentials. Currently, I can login to server1 and run remote PowerShell commands on server2 using smartcard…
4
votes
1 answer

How to register PKCS11 library in Google Chrome on Windows?

How can I register the PKCS11 library in Google Chrome when I use a Gemalto smardcard reader?
4
votes
2 answers

How to reduce the size of javacard applet

I wrote an applet which has 19 KB size on disk. It has three classes. The first one is extended from Applet, the second one has static functions and third one is a class that i create an instance from it in my applet. I have three questions: Is…
Mohsen Gorgani
  • 420
  • 4
  • 18
4
votes
0 answers

android permission : perform an unknown action

I'm working on an Android app that uses SEEK for Android to access the SIM card. I need the following permission : The protection level of this permission is "dangerous", so…
Jorah
  • 41
  • 3
4
votes
1 answer

SIM card and JCRE confusion

As far as I know, the SIM card is a Java Card and it shall implement the ETSI/3GPP specifications and the UICC configurations. If the SIM is a Java Card - does it contains a JCRE from the Suns JCRE specification? If the SIM card has a JCRE - is it…
Bluestar
  • 79
  • 1
  • 7
4
votes
1 answer

How to get further data from JavaCard after 0x6310 status?

I'm trying to list applets/packages on a Java Card. I use the following APDU command to get the list: 80 F2 E0 00 02 4F 00 00 That command returns the status word 0x61xx, so I send a GET RESPONSE command for xx bytes: 00 C0 00 00 xx This gives…
4
votes
3 answers

Use APDU commands to get some information for a card

I have a terminal that has its own API to stablish and send commands between chip and terminal, there is a function that transmits the APDU command and returns the answer in a byte array. For example, if a want to read the tag 5A (Application PAN),…
angelreyes17
  • 81
  • 1
  • 1
  • 5
4
votes
1 answer

Behavior of javax.smartcardio.Card.disconnect(boolean reset) in JDK 7u79?

According to the release notes of JRE 7u72: Change in javax.smartcardio.Card.disconnect(boolean reset) method behavior Prior to the JDK 8u20 and JDK 7u72 releases, the javax.smartcardio.Card.disconnect(boolean reset) method had inverted logic…
John Doe
  • 179
  • 9
4
votes
1 answer

smartcard PKCS#11 support on MacOSX

Does the MacOSX provide any kind of API for accessing to smartcard contents via PKCS#11 interface? I am looking for something similar to the Smart Card API Smart Card API provided by Windows. Or similar to more recent Smart Card Minidrivers
cristallo
  • 1,951
  • 2
  • 25
  • 42
4
votes
0 answers

CCID IccPowerOn Status 00h and Error 80h

I send PowerOn CCID command on card insertion to receive ATR. But instead I always get this error: PC_to_RDR_IccPowerOn (00h Automatic): bStatus: 0x0 bError: 0x80 Error 80h according to CCID spec "Reserved for future use". But same code working…
dasar
  • 5,321
  • 4
  • 24
  • 36
4
votes
1 answer

ASP.NET MVC 2 and request client certificate (Smart Card authentication)

I need to capture user's X.509 certificates from their cards and map to a user table for forms authentication in ASP.NET MVC. I have created an MVC (ver 2) project in VS 2008, configured to run as a virtual directory under the Default Web Site in…
Andy
  • 61
  • 1
  • 8
4
votes
2 answers

difference between APDU command between contact and contactless Interface

I have a question about APDU format in contact and contactless Interface. I have an ACR122U contactless card reader and i studied it's API (v2.1). According to the document, apdu format in contactless mode is different from contact mode. for example…
Mohsen Gorgani
  • 420
  • 4
  • 18