Alessandro Premoli wrote:
Nils Larsch wrote:
that's not surprising. old cardos cards couldn't sign and decrypt with
the same key

Do you mean that new cardos cards don't have this limit? From what version? Is anyone aware of the reason of this limit?

I guess it is still the same. There are two solutions:
a) opensc has "--split-key" where the key is software generated or importand and then stored twice under the same id with different use flags.
b) siemens creates the key as sign key with raw rsa allowed, and uses
a raw rsa sign operation for decrypting (same result). (or the other way round?)

guess we need to implement that hack too :(

Andreas
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to