Hi Johannes, I think it would be great to have full opensc support for the cards.
In the documentation I didn't read anything about software updates so not sure what that binary blob is. maybe the card uploads some the RSA key rather than uses the cards rsa key generation? > I'm quite new to this, not having much knowledge on the subject beside > whats in 'Handbuch der Chipkarten/Smart Card Handbook' by Wolfgang > Rankl, plus the PKCS-docs from RSA. that is a good start. > Instead of changing libopensc to accomodate the 'special' format, one > could try to initialize the card differently. This might burn quite a > few cards to get it right. I have around 30 available. > > If anybody wants to take a look: I can send cards (initialized or not), > traces, and my (very rough) patches. I have some cards too, but no time to develop a driver for opensc. > Is it worth the effort? ACOS card are both cheap and readily available, > including at least some documentation. But it looks as if it would be > quite a bit of work to support these cards. I think ACOS5 is the most interesting card out there right now. would be great to have a driver. Writing a driver consists of several parts (warning: never did that myself so far, others can help much better her): - writing a card-NAME.c driver in libopensc/ with the low leven routings. most is straight forward, the hairy part is the security model. - writing a pkcs15-name.C driver and a NAME.profile in pkcs15init/ you could look at some existing driver and what it does, and try to map this to ACOS5. cards differ mostly in the security situations I guess, some have special objects, other special files etc. and the structures are different all the time I guess. for opensc it would be very interesting if the driver would support both setups: a) security officer + normal user b) single user also it would be nice if the card can be erased anytime (if you know the PINs). i.e. don't finalize it (but there could be an option to do that). Regards, Andreas _______________________________________________ opensc-devel mailing list [email protected] http://www.opensc-project.org/mailman/listinfo/opensc-devel
