Re: Encryption of data in smart cards

2003-03-14 Thread bear
On Wed, 12 Mar 2003, Krister Walfridsson wrote: On Tue, 11 Mar 2003, Werner Koch wrote: If you want to encrypt the data on the card, you also need to store the key on it. And well, if you are able to read out the data, you are also able to read out the key (more or less trivial for most

Re: Encryption of data in smart cards

2003-03-14 Thread Nikita Borisov
Trei, Peter wrote: John Kelsey[SMTP:[EMAIL PROTECTED] At 11:08 PM 3/12/03 +0100, Krister Walfridsson wrote: This is not completely true -- I have seen some high-end cards that use the PIN code entered by the user as the encryption key. And it is quite easy to do similar things on Java cards...

Re: Encryption of data in smart cards

2003-03-13 Thread John Kelsey
At 11:08 PM 3/12/03 +0100, Krister Walfridsson wrote: ... This is not completely true -- I have seen some high-end cards that use the PIN code entered by the user as the encryption key. And it is quite easy to do similar things on Java cards... With any kind of reasonable PIN length, though,

RE: Encryption of data in smart cards

2003-03-13 Thread Trei, Peter
John Kelsey[SMTP:[EMAIL PROTECTED] At 11:08 PM 3/12/03 +0100, Krister Walfridsson wrote: ... This is not completely true -- I have seen some high-end cards that use the PIN code entered by the user as the encryption key. And it is quite easy to do similar things on Java cards...

Re: Encryption of data in smart cards

2003-03-13 Thread Anne Lynn Wheeler
At 01:13 PM 3/13/2003 -0500, John Kelsey wrote: At 11:08 PM 3/12/03 +0100, Krister Walfridsson wrote: ... This is not completely true -- I have seen some high-end cards that use the PIN code entered by the user as the encryption key. And it is quite easy to do similar things on Java cards...

Re: Encryption of data in smart cards

2003-03-12 Thread Anne Lynn Wheeler
At 10:39 AM 3/11/2003 +0530, N. Raghavendra wrote: Can anyone point me to sources about encryption of data in smart cards. What I am looking for is protocols for encrypting sensitive data (e.g., medical information about the card-holder), so that even if the card falls into malicious hands

Re: Encryption of data in smart cards

2003-03-12 Thread Krister Walfridsson
On Tue, 11 Mar 2003, Werner Koch wrote: If you want to encrypt the data on the card, you also need to store the key on it. And well, if you are able to read out the data, you are also able to read out the key (more or less trivial for most mass market cards). This is not completely true --

Encryption of data in smart cards

2003-03-11 Thread N. Raghavendra
Hello, Can anyone point me to sources about encryption of data in smart cards. What I am looking for is protocols for encrypting sensitive data (e.g., medical information about the card-holder), so that even if the card falls into malicious hands, it won't be easy to read that data. Thank you