Hi Nils! Nils Larsch <nlarsch <at> gmx.net> writes: >this is most likely a HMAC (using DES or 3DES) > unless secure messaging is used when the key is written to the > token a usb sniffer might be useful to get the key
I explore eToken stick files, but whith file is DES key? I don't found 7 byte (DES) or 21 byte (3DES) files. And where pin code is using? It must be pin verification. Maybe HMAC key is corresponding to pin and try some like this: HMAC(EVP_sha1(), ansii_pin, ansii_pin_len, challenge_response, challenge_response_len, mac, &macLen); But I need buffer 8 byte, HMAC return value equal hash algorithm size. _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel