Is it possible to have a stripped-down and slimmed version of 
pkcs11-tool (or a similar, may be new) program which does just one 
thing: read the contents of a data object (given by either 
application-id or application-label) on a smartcard (enter PIN if the 
data object was previously stored with --auth-id option) and display it 
on the console? I do not need this new program (modified pkcs11-tool or 
otherwise) to do anything else, i.e. sign data, store keys, do hashing 
etc - just to read a specified data object, display that data on the 
console and finish.

The reason I am asking for this is simple: I am currently designing a 
module to be included in the initrd/initramfs which needs to read a data 
object token from a smartcard and use this data to unlock/open root (/) 
encrypted partition.

if I use the current pkcs11-tool/pkcs15-tool I need to have at least 5 
other packages installed and satisfy another dozen or so other 
dependencies (and have openct and possibly pcscd daemons running!), 
which, to me, is a big overkill. Besides, initrd/initramfs run a very 
limited kernel system and I am not sure I would be able to satisfy all 
the dependencies in order to make it work, hence why I need a 'lite' 
version of a tool which is designed to do just the reading and 
displaying of the specified data object and that's it.

Is this possible?
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to