Hello mr. Stick.
On 10.01.2010, at 21:49, Crypto Stick wrote:
> Recently the new OpenPGP Card version 2 was released. This card
> overcomes the limitations of version 1 and can store/use RSA keys up to
> 3072 bit length, is compatible to X.509, and AFAIK it can store also the
> certificate. The good thing is that the API of this card is fully
> published! http://www.g10code.com/p-card.html
Nice. I don't believe anyone has tried 3072b keys with OpenSC and you'll 
probably run into problems with some readers (or software)


> I tried to use the card with OpenSC but unfortunately it does not work:
> 
> $ opensc-tool --reader 3 --name
> Card not present.
> 
> $opensc-explorer
> Using reader with a card: Gemplus GemPC Twin 00 00
> [opensc-explorer] iso7816.c:99:iso7816_check_sw: Wrong parameter(s) P1-P2
> [opensc-explorer] iso7816.c:464:iso7816_select_file: returning with:
> Incorrect parameters in APDU
> [opensc-explorer] card.c:554:sc_select_file: returning with: Incorrect
> parameters in APDU
> unable to select MF: Incorrect parameters in APDU

You don't need to specify a --reader if you only have a single reader with a 
single card (opensc-tool -l would also be beneficial in this case)



> I would be very interested to get the OpenPGP Card v2 work with OpenSC
> but unfortunately I don't have the knowledge of OpenSC. Could you
> provide me some advice how to proceed to get it working? Also it would
> be great if any of you OpenSC developers is willing to work on this?!
To get the basic things going you need to either update the existing openpgp 
card driver and/or make sure the rest of OpenSC can handle your key sizes.

If the interface is way different it might be better to create a new driver 
instead. Look at src/libopensc/card-openpgp.c for hints, at least add the card 
ATR.


-- 
Martin Paljak
http://martin.paljak.pri.ee
+372.515.6495




_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to