Thomas Harning Jr. wrote on 11/30/06 06:05 AM:
On Thu, 2006-11-30 at 09:47 +0100, Andreas Jellinghaus wrote:
Hi Thomas,

thanks a lot, commited.

will try to run the full regression test suite, with your extensive
testing we should get a pass now.

once question: we still have that unidentified pin #1? (which
we set to "00000000" and enter that when asked.)
what are the settings for this pin, will the card lock up if it
is tried with the wrong value a few times?

I'm asking because I wonder if we can make that a transport key,
so people won't need to enter it, but could use "--use-default-transport-key"/"-T" instead.

Regards, Andreas
The unidentified pin is the user pin initialized when you initialize the
card.   The card can lock up if it's entered wrong a few times, but since
its a normal user PIN, you could reset the card or use unblock and it'd
be ok.
Yeah... using that as a transport key would make sense.

Except that there is also an admin PIN for the MCardApplet, and that's
actually sometimes referred to as a transport key. The default value for
that is 0x4D7573636C653030, but it gets changed when the applet is
personalised. Both PINs also get assigned numbers of attempts before
they get locked, and both have unlock keys (PUKs) too.

I suppose all of that could be "pushed down" when we layer OpenSC on
top - making the MCardApplet's user PIN be the "transport key" for
OpenSC...

    ~Iain

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to