Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
4
votes
1 answer

brainpool320r1 Elliptic Curve not supported in Java Card?

I am working on a Java Card 3.0.1 applet on which I use ECC. My card supports ECC GF(p) up to 320bits, so I tried to use the brainpool320r1 elliptic curve (parameters). The problem is that I get a CryptoException that I don't understand... It is the…
Raoul722
  • 1,222
  • 13
  • 30
4
votes
1 answer

SSLSocket with hardware token key

I'm interested in using a client token to perform client certificate authentication for SSL/TLS, but the client private key resides on a (non-PKCS11-accessible) hardware token. I originally wanted to replace the key manager, but I can't return the…
emsworth
  • 1,149
  • 10
  • 21
4
votes
1 answer

Determine Facility Code and Card Number from ATR in C#

I have the following card reader HID Omnikey 5325. I have a contact-less card named HIS Proximity. The number written on this card is 133593 42101044091-3. By reading the card, I get the following ATR hex: 3B050002F10673 Using the folowing…
Dragos Durlut
  • 8,018
  • 10
  • 47
  • 62
4
votes
1 answer

NFC SWP applet selection returns 6999

I have a simple JavaCard applet installed on my SIM card. I try to communicate with my applet using Omnikey 5121 CL reader and NFC-enabled Sony Xperia L through NFC/SWP (single wire protocol). The problem is I cannot select the applet - as a status…
vojta
  • 5,591
  • 2
  • 24
  • 64
4
votes
2 answers

Smartcard PKCS11 AES Key Gen Failure

I am attempting to create an AES 256 key on an ACOS5-64 smartcard and OMNIKEY 3121 card reader, using PKCS11 in python (using the PyKCS11 library). So far, all the "standard" operations seem to work with regards to asymmetric crypto. I have run…
Alan CR
  • 101
  • 6
4
votes
2 answers

How to perform ECKA and have an ECPoint returned?

I'm using Bouncy Castle to perform the Elliptic Curve Key Aggreement using the ECDH protocol in a smart card related software, as defined in the BSI-TR-03111 specs, §3.4 with The purpose is to perform the Generic Mapping of the nonce in the PACE…
4
votes
3 answers

Extended APDUs and T=0/1 communication protocols

I have a JCOP V2.4.2 R3 java card that it is mentioned in its datasheet "The card support both T=1 and T=0 communication protocols" I have also an ACR38 smart card reader that it support both T=0 and T=1 protocols. (I have T=0 communication with one…
Jean
  • 687
  • 1
  • 9
  • 25
4
votes
1 answer

RAM over http client agent?

I have a requirement to build a server that deploy applets into sim cards over the air using http as defined in globalplatform amd.B specs and ETSI TS 102225 and 102226. My question is about the http client on the sim cards. Do SIM cards have the…
Z Noon
  • 51
  • 2
4
votes
6 answers

Is there a free virtual SmartCard which I could use to run some tests?

I imagine this makes no difference, but I will try to access it using a Java application. UPDATE: I'll use smart cards in a public/private keys encryption system.
The Student
  • 27,520
  • 68
  • 161
  • 264
4
votes
1 answer

Smart cards and Secure channel requirements of Common Criteria (Class FTP)

In the second part of Cammon Criteria standards, There is a class named FTP. In security target of Smart Card and Java cards, it is mentioned that the card must meet these requirements. Below you see two elements of this class for my JCOP v2.4.2 r3…
user3739941
4
votes
1 answer

How to use ISO7816 select command with DESfire Ev1 card?

I have a DESfire Ev1 version 1.3 card and I'm trying to select a file using ISO7816 apdu style. I have one file, with aid A0 A1 A2 and I can select it using both native or wrapped mode: Native: -> 5A A0 A1 A2 <- 00 Wrapped: -> 90 5A 00 00 03 A0 A1…
Marcos Ramos
  • 135
  • 1
  • 2
  • 4
4
votes
2 answers

EMV Smart Card TLV Format Error?

I am developing a smartcard reader for reading EMV cards. I am working on a Mastercard card, and I was trying to read a specific record. The result showed the reading was fine, but when I parse the results, they do not seem to follow the TLV…
Peter
  • 648
  • 7
  • 26
4
votes
3 answers

Smart card : Get certificates content with APDU commands

I works on a Gemalto Smard Card and I try to get the content of two certificates stored on this. For this, I've sent several APDU commands with success. But, I've never found the content of my certificates. First, I get the ODF (Object Directory…
JohnDoe66
  • 855
  • 2
  • 11
  • 16
4
votes
2 answers

SCardConnect (winscard.dll) is always returning error

I am trying to connect a smart card reader using following code retCode = ModWinsCard.SCardConnect(hContext, cbReader.SelectedItem.ToString(), ModWinsCard.SCARD_SHARE_SHARED, ModWinsCard.SCARD_PROTOCOL_T0 | ModWinsCard.SCARD_PROTOCOL_T1, ref hCard,…
hellowahab
  • 2,445
  • 4
  • 21
  • 34
4
votes
2 answers

Select MF (Master-File) - Read EEPROM of a javacard

I have two different javacard with below ATRs : 3B 68 00 00 00 73 C8 40 12 00 90 00 3b 7F 94 00 00 80 31 80 65 B0 85 02 02 ED 12 0F FF 82 90 00 Let assume that I want to Select MF.As far as I know, and mentioned in ISO 7815-4 , we can select…
TheGoodUser
  • 1,188
  • 4
  • 26
  • 52