Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
4
votes
2 answers

How to change the Mifare Classic 1k key A and Key B

I am using a Mifare classic 1k reader, and it comes with the default key A and B which is: FFFFFFFFFFFF Using the Key A to read and write works. but I want to change the keys. Is there anyway to get the correct access bits for the sector and what…
Liban
  • 641
  • 5
  • 19
  • 32
4
votes
1 answer

PC/SC driver for smart card simulation. How to get started?

I need to develop a Windows driver that would emulate plugged smart card reader (so that Windows would show it on the list of plugged devices) and a smart card into them. Instead of this it would read/write data from/to file according to specific…
Zharro
  • 819
  • 1
  • 11
  • 23
4
votes
1 answer

Exec Maven Plugin to Command Line

I have an application developed in NetBeans/Maven that can be started via command line with: mvn exec:exec "-Dexec.executable=C:\\Java\\jdk1.6.0_33\\bin\\java.exe" "-Dexec.args=-Dlog4j.properties=... -classpath %classpath com.xxx.MyLauncher"…
mistercaste
  • 236
  • 2
  • 4
4
votes
2 answers

Exception in thread "main" java.lang.UnsatisfiedLinkError"

This exception is arising when I am running my program for smart card reading. My device is not connected. Please help me.
JDGuide
  • 6,239
  • 12
  • 46
  • 64
4
votes
3 answers

Does Java Crypto JCA Provider really require windows dll?

As I read here here: "Unlike most Java Cryptography Architecture (JCA) providers, the Sun PKCS#11 Provider does not implement the cryptographic functionality directly; it relies on a native PKCS#11 implementation to which it forwards all…
user310291
  • 36,946
  • 82
  • 271
  • 487
3
votes
1 answer

CSP Provider Name

how can I get CSP provider name of my connected smartcard? I couldn't access to registry windows so I'm find some way to achieve that information through win API. I've already seen something about SCardGetCardTypeProviderName but it seems…
bit
  • 934
  • 1
  • 11
  • 32
3
votes
3 answers

AppStore distribution certificate/keys on smartcard?

Has anyone done any investigation as to whether the Apple AppStore distribution private key/certificate can be stored on a smartcard? I work for a large company that is about to release several iOS applications and we're concerned about the best…
Shadowman
  • 11,150
  • 19
  • 100
  • 198
3
votes
1 answer

java applet to sign (via token/smartcard) and upload documents to a servlet

Any directions on how to deal with this scenario: I have one web app that needs to upload a local file (not yet signed, a text file, for example), than sign it locally (so one applet) using the private key stored in a token/smart card owned by the…
3
votes
2 answers

Remote site and client private keys

I have a bit of a difficult situation in that I need a way for a client connected to an ASP.NET MVC site to sign and decrypt blobs with their private key, such that the server never sees the private key material. In the decryption case, these are…
mfanto
  • 14,168
  • 6
  • 51
  • 61
3
votes
1 answer

Difference between WIN32 and x86 in smart card project

I have smart card related project.In smart card field x86 and win32 has any difference.Because I have to create 32bit application in vc++.So what solution platform,Should I choose in MS visual studio 2008.
jiten
  • 5,128
  • 4
  • 44
  • 73
3
votes
1 answer

Why '90 00' status word is chosen for sucessful response in smart cards?

ISO 7816-3 (Cards with contacts — Electrical interface and transmission protocols) defines that response value of 90 00 as 'Process completed normally'. It is unlike conventions in programming languages which return value 0 is considered as success…
VSB
  • 9,825
  • 16
  • 72
  • 145
3
votes
1 answer

How to convert a certificate from a GIDS card into a crt file?

I'm working on some low level Android software for a smart card reader. I'm trying to add support for GIDS devices and am having some trouble using the certificates that I'm able to pull from the card. PIV cards store the certificates in such a way…
3
votes
3 answers

What is the purpose of the EFADN (abbreviated Dialing Number) file on SIM Card

When I was reading the book Smart Card Applications by Wiley and I came across the "EFADN file". The EFADN (abbreviated dialing number) file of a SIM can be used here as a typical example. This file can only be read using the READ RECORD command…
Dungeon Hunter
  • 19,827
  • 13
  • 59
  • 82
3
votes
1 answer

Usage of SIM card GlobalPlatform keys in field

Question 1. When a SIM manufacture personalizes a SIM card and then the mobile operator hand it over to an end user, are there any usage for GlobalPlatform (GP) keys (ENC,MAC,KEK,...)? As long as I know the SIM file structure or its applets are…
VSB
  • 9,825
  • 16
  • 72
  • 145
3
votes
1 answer

Smart card client certificate doesn't get registered in Personal store on Win 2003 x64 server

I'm accessing a smart card from c# through the Windows Certificate Store. This works well on many systems. On one system however, it doesn't. The smart card certificate is not added to the Personal Certificates. We need it to be in the certificate…
AronVanAmmers
  • 1,668
  • 20
  • 24