Hi Nils!

Nils Larsch <nlarsch <at> gmx.net> writes:
>this is most likely a HMAC (using DES or 3DES)
> unless secure messaging is used when the key is written to the
> token a usb sniffer might be useful to get the key

I explore eToken stick files, but whith file is DES key? I don't found 7 byte 
(DES) or 21 byte (3DES) files.


And where pin code is using? It must be pin verification.   
Maybe HMAC key is corresponding to pin and try 
some like this: 

HMAC(EVP_sha1(), ansii_pin, ansii_pin_len, challenge_response, 
challenge_response_len, mac, &macLen);

But I need buffer 8 byte, HMAC return value equal hash algorithm size.     






_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to