Martin Paljak wrote:
> On May 14, 2010, at 11:36 , Jan Just Keijser wrote:
>   
>>> In this case it should be either fixed in reader-pcsc.c for this reader (if 
>>> it is possible to auto-discover it, which may not work on Windows for 
>>> example) or forced to a reader-suitable value in the CCID driver.
>>>
>>> I guess 99% of people don't have longer than 6 or 8 digit PIN-s in real 
>>> life (which also seems to be the way Gemalto things)
>>>  
>>>       
>> one of the reasons we are using Aladdin eTokens is because it allows a PIN 
>> (password, really) that is 12 characters or longer. Thus I'd be strongly 
>> against limiting the PIN to anything shorter than what the card allows: we 
>> cannot foresee the security restrictions that the user has when searching 
>> for a particular card/token/
>>     
>
> Sure. But you're talking about a different reader and a different card, which 
> does not relate to the GemPC pinpad reader or the Entersafe driver at all.
>
> This is a limitation of the specific reader so it should apply universally to 
> the reader, not to the card driver or the rest of OpenSC.
>   


We'll wait for the comments in Ludovic's blog, but I tested feitian card
with "Gemalto PC Pinpad Reader" without the patch and with the PIN
length 12 bytes.

Afaiu the PCSC#10, the PIN size (number of digitals entered by user, not
the real PIN length in APDU)
is encoded by 4 bits.

-- 
Viktor Tarasov  <viktor.tara...@opentrust.com>


_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to