Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-11 Thread Anders Rundgren
If the keystore process uses sockets (SKS uses Web Services over sockets), you could achieve trusted path detection in Linux without any significant programming at all: http://welz.org.za/notes/on-peer-cred.html This scheme is for example used by PostgreSQL for their "ident" authentication scheme

Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Frank Morgner
On Monday, October 10 at 12:43PM, Anders Rundgren wrote: > > On 2011-10-10 12:05, Martin Paljak wrote: > > Hello, > > > > On Mon, Oct 10, 2011 at 12:27, Anders Rundgren > > wrote: > >> Is there any support for trusted (OS-level) PIN input in OpenSC? > > > Trusted path for me means guaranteed by

Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Anders Rundgren
On 2011-10-10 12:05, Martin Paljak wrote: > Hello, > > On Mon, Oct 10, 2011 at 12:27, Anders Rundgren > wrote: >> Is there any support for trusted (OS-level) PIN input in OpenSC? > Trusted path for me means guaranteed by tamper-proof mechanisms, which > usually means separate hardware-guaranteed

Re: [opensc-devel] Trusted PIN support in OpenSC

2011-10-10 Thread Martin Paljak
Hello, On Mon, Oct 10, 2011 at 12:27, Anders Rundgren wrote: > Is there any support for trusted (OS-level) PIN input in OpenSC? Trusted path for me means guaranteed by tamper-proof mechanisms, which usually means separate hardware-guaranteed channel, which in turn would mean something like TPC, w