>> 1. Generate a key file. I used:
>>   - dd if=/dev/random of=~/master-key bs=1 count=2048
>>   - dd if=~/master-key of=~/key256 bs=1 count=256
>>   - dd if=~/master-key of=~/key512 bs=1 count=512 seek=256
>>   - dd if=~/master-key of=/key1k bs=1 count=1024 seek=768
>>     
>
> For what kind of algorithm are these keys? They are very large.
>   
They all get hashed (sha512 I think), so as long as the data stream is 
larger than 32 bytes that's good enough. I am aware that the keys are 
quite large - this is just for testing for the time being. The actual 
keys will be about 64 bytes long, no more than that.


> OK, I'm using almost the same command:
>
> pkcs15-init -W CIAInfo.bin --application-id "1.2.3" -l "MyObject" -a 01
>   
Does it work properly? Do you get it to list the data?


>> I am using the version I've downloaded and compiled as per your kind 
>> instructions. I think I downloaded it from the main OpenSC project site 
>> (though from what I remember the links were messed up somewhat and even 
>> though the link on the page was telling me that I am downloading the 
>> newest version the actual .tar.gz file was for a version, which was 2 or 
>> 3 revisions old so I had to go directly to the ftp server to do it).
>>     
>
> You are using the latest official release, which is 0.11.13
> (opensc-explorer states that). But development goes on in a version
> called trunk. Someday in the future, trunk will become the next official
> release. For your purpose using 0.11.13 is fine. But if you want to test
> trunk, then execute:
>
> svn co http://www.opensc-project.org/svn/opensc/trunk opensc
>   
I know what trunk is (I am a developer too you know!). I will clone the 
latest source (not least to get it with your latest patch applied - the 
very reason I replied to your initial post, which started this thread!), 
though, for the time being the version I am using is good enough (I also 
created a patch on my own to pkcs11-tool to get rid of the prompt via an 
additional option as it was messing up the output from plymouth).

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to