>> Hi all,
>> I am looking for information about the process of generating keys - the
>> private and the public key - in a smartcard.
I only know Gemplus smartcards. And they have one (called GPK, from Gemplus Public
Key), that has such features. You just have to send a command (APDU) to create the PKI
support, wich means both public and private part of the key.
I hope it's useful.
Someone told me that some types
>> of smartcards needed a Security Access Module. Can anyone confirm this?.
Again with Gemplus. In this card, the GPK you don't need to have a SAM.
>> Is absolutely necesary use this module to create the pair of keys?.
Absolutely, if you are to use PKI.
In some
>> smartcards I think that it�s possible to create without this module.
Sorry. I don't understand this point.
>> Particulary I am interested in Schumlberger, Bull, GyD, Gemplus
>
>
>The SAM I have heard of is a tamper-resistant (i.e. FIPS 140 or ITSEC)
>box which goes into ATMs. I'm not sure what a SAM for a smartcard means...
What I know, is Gemplus SAM's. Very expensive security cards, that are used not only
for applications, but with a stronger cripto engine (that's where security comes from)
>maybe a box which is a reader and which generates the key to put it
>on the card?
No. You can use it for the Certificate Authority, to create the certificate. Again, if
you are using PKI.
>A number of higher-end smartcards have key generation facilities.
>One problem is that key generation for RSA requires a good source
>of random numbers, and I have heard from some researchers that smartcard
>RNGs are often poor. Hardware RNGs are wierd and often require a lot
>of power (i.e. for free-running ring oscilators) making them difficult to
>include on a space and power limited smartcard.
>
>I beleive that Gemplus GPK series cards can generate RSA keys.
Right.
______________
ERROR CODE 586: This will terminate your windows session
Do you want to play another game? (Y/N)
U'd better try LinuX Checo
------------------------------------------------------
Registrate y obten un correo gratuito, seguro y de por vida en:
www.OficinadeCorreo.com.
No olvides visitar el mejor chat de Latinoam�rica, ven y conectate con el mundo en
www.barriolatino.com
***************************************************************
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***************************************************************
