>From page 44 of the CNS specification: "The symmetric keys used by the smartcard to decrypt and/or verify the APDU commands are obtained from the SM condition related to the object or file on which the APDU command should operate. The SM conditions for BS objects and files are defined at object/file creation time by the commands CREATE FILE and PUT DATA (DATA_OCI). The SM conditions for BS objects and files are managed using the commands PUT DATA (DATA_OCI) and PUT DATA (DATA_FCI)."
There is some access condition on the private key corresponding to the "qualified certificate". That access condition refers to a SM BSO. That SM BSO contains a secret symmetric key. you need to know that symmetric key in order to make signatures with the qualified certificate. _______________________________________________ opensc-devel mailing list [email protected] http://www.opensc-project.org/mailman/listinfo/opensc-devel
