As has been demonstrated frequently on this list, information about security
procedures with a particular card has to be obtained from the card supplier.
Standardisation of formats and algorithms is gradually happening, but so far
it seems that the information that is available needs to be funnelled
through the card supply chain to the implementor, so that you can be sure of
knowing exactly how to handle any particular card.
Further parts of 7816 contain more standardised commands for security
functions. the following is an extract from a review paper written in April
2000:
? ISO/IEC 7816-8 Identification cards - Integrated circuit(s) cards with
contacts - Part 8: Security inter-industry commands
The current edition was published in December 1999
? ISO/IEC 7816-9 Identification cards - Integrated circuit(s) cards with
contacts - Part 9: Additional inter-industry commands and security
attributes
The first edition is targeted for publication in July 2000.
As explained to a seminar recently by Sun, the current Javacard
specification development work includes standardising applet management
(load, delete, etc).
Peter
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, February 23, 2001 1:13 PM
Subject: [OCF] Info on raw APDU's (verify)
Hi all,
The ISO 7816:4 isn't extremely easy to read, nor does it contain any
examples of how to use the APDU's. That's why I am looking for other
sources of information :)
Where is it possible to find out more regarding what sequences of
steps is needed to perform more advanced tasks with a smart card,
e.g. verify a pin, read from a file that is protected and so on?
What I have available is "Smart Card Application Programming Using
Java" (it is a little bit too high level for my usage), ISO
7816. Embedded OCF (I am only allowed to use the terminal layer) and
as a sample card I am using the card that comes with the book
mentioned.
Thankful for all help,
Magnus
--
Magnus Therning
[EMAIL PROTECTED]
+31-40-27 45179
---
> Visit the OpenCard web site at http://www.opencard.org/ for more
> information on OpenCard---binaries, source code, documents.
> This list is being archived at http://www.opencard.org/archive/opencard/
! To unsubscribe from the [EMAIL PROTECTED] mailing list send an email
! to
! [EMAIL PROTECTED]
! containing the word
! unsubscribe
! in the body.
---
> Visit the OpenCard web site at http://www.opencard.org/ for more
> information on OpenCard---binaries, source code, documents.
> This list is being archived at http://www.opencard.org/archive/opencard/
! To unsubscribe from the [EMAIL PROTECTED] mailing list send an email
! to
! [EMAIL PROTECTED]
! containing the word
! unsubscribe
! in the body.