Hello

For our internal needs we wanted to use some token to store our private keys. As we mostly work with OpenSource we want to stick with opensource for that too.

In France, a reseller introduced me with some pre-sales at SafeNet (seems like Aladdin is part of SafeNet now) that sent us some eToken Pro samples. First the sample was the "locked" token loaded with aladdin software in it, using that you are tied using closed source middleware. I asked if there are any ways to get some blank eToken. The fact is you can't buy blank Token, but Aladdin is able to produce some eToken loaded with any custom applet. They sent me another sample with a known ISD key so I can erase it and load the applet.

I tested the applet compiled by Joao from here, in IJC format with all the instructions :

http://www.opensc-project.org/pipermail/opensc-user/2009-June/003147.html

Which works well, under Linux and windows with opensc for Windows.

To get this into "production", Aladdin needs a CAP file. Next step for me is to compile my own applet to get this CAP file.

Joao said the applet is patched to use the RAM instead of the EEPROM for some computations, are these patches included in mainstream now ?

Any of you can point me to a guide ? The README file is a bit light on this, which version of Java should I (not) use ? Do I need to download latest version for each build tool or those provided with my Linux distro is good ?

Which MuscleCard applet should I use ?
 - The applet found from the linuxnet.com site is quite old, from 2002.
- The package from here : http://muscleplugins.alioth.debian.org/ is younger but still 2003. - The SVN : http://svn.debian.org/wsvn/muscleplugins seems more up to date, las commit in december 2009

In general, any advices are welcome.

Thanks all for the work, MuscleCard and OpenSC works pretty well together.
Jon.
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to