> > My next question (assuming you've read this far heh heh) is whether
> > an external, serial-based ChipDrive is capable of acting as a
> > programmer for the atmel-based smartcards like the Funcard? My
> > first instinct is to say "no".
>
> It is not possible. You need special control of the two lower, in
> normal smart cards unused contacts, which the Towitoko or any other
> normal IFD does not provide.

Got it. Thank you for the clarification.

> > So, then, where to find a programmer?
>
> Either at the shops, where you can buy the Funcards or build one
> yourself. It is just an interface for RS-232 to the SPI interface
> used on Atmel controllers.

I think building one for myself would probably be the next step after 
getting hold of some actual cards themselves. It looks much simpler 
than I thought it was. :) I mean, I'd heard that Atmel reprogrammers 
were just a couple of components on a circuitboard, but geez! :)

> Ok ... what you should know about the Funcard platform:
>
> 1) These are not secure controlers, but COTS controlers with nearly
>    no security. (They do have internal lock bits for internal code
> and data, but the protection is nearly as good as what you can get
> from secure controlers.)

Ah, the lockbits are purely for the CPU unit itself--reading the memory 
chips usually included on these cards, I imagine, would probably be 
much easier. Makes sense.

> 2) The Funcard has not big integer unit. So it can't do any RSA.

Ouch. I was jumping right in with an (almost) new STK500, too, to begin 
my adventures. And here I'd managed to get some primitive communication 
via the I/O ports and the LEDs and switches on the STK, and also some 
very simple encryption (just XOR) for testing while I find a reputable 
supplier for my funcards. (My STK is pretending to be kit from knight 
rider at the moment. :)

> So, what is SOSSE good for if there is not good platform? Learning
> and experimenting. SOSSE has been used for e.g.:
>
> 1) Analyzing DPA
>
> 2) Platform for implementing AES in a university lab course

Got it! So the basic AES is possible, but not RSA. I imagine it would be 
with some heavy kludging.. 

Okay then, I'll stop being stubborn--in place of Funcards, does anyone 
have a recommendation for good general purpose smartcard that can be 
entirely reprogrammed and has decent documentation available? I suppose 
what I'm looking for is a recommendation from anyone who's some 
experience developing applications for smartcards. Pros, cons, what you 
think is decent non-buggy hardware that doesn't get in your way, that 
sort of thing.

Much obliged for all the messages, the response here has been just 
tremendous.

_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle

Reply via email to