2009/12/13 Andreas Jellinghaus <a...@dungeon.inka.de>:
> I tried all four combinations of old/new code for init and for signing.
>
> only cards initialized with old code and signing with new code is broken,
> so we could as quick fix revert the change.

I remember doing this patch.
The problem was that the ASN.1 encoder/decoder routines were bogus.
Negative values and "special" values like 128 were not encoded
correctly.

I am not really surprised that cards initialized with an old version
have problems when used with a new one. But I am surprised that the
problem is only discovered ~2 years after the code change.

I am not sure the correct solution is to revert the patch and continue
using a bad ASN.1 encoder/decoder for ever.
Maybe users with problematic cards should re-issue them using the
corrected ASN.1 encoder?

Regards,

-- 
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to