[opensc-devel] About new feature of SHA-1 for card driver!

2007-12-03 Thread Anri Lau
Dear Friends: Fortunately, I read the source code of yours for opensc. It is great. I got a lot from them. But I have some questions. could you give me some answers, please? Thanks a lot. I want to add the SHA-1 aglorithms for muscle card applet and driver. And make it as an engine of openssl.

Re: [opensc-devel] About new feature of SHA-1 for card driver!

2007-12-03 Thread Ludovic Rousseau
2007/12/3, Anri Lau <[EMAIL PROTECTED]>: > Dear Friends: Hello, > I want to add the SHA-1 aglorithms for muscle card applet and driver. And > make it as an engine of openssl. Now i have no idea for it. Why do you want to compute a SHA-1 in the card since it is orders of magnitude faster to compu

[opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Simon Eisenmann
Hi, today is tried to create a new schlumberger e-gate 32K card to test 2048 bit keys on these type of cards. Though i failed to sign the CSR with openssl, cause openssl tells me that the CSR's signature does not match the request. This is what i did (blank e-gate 32K card): $ pkcs15-init -EC -T

Re: [opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Simon Eisenmann
Here come the openssl error messages when verifying this CSR with -verify parameter. verify failure 26390:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100: 26390:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:699: 2639

Re: [opensc-devel] Smart Card documentation diagram - draft

2007-12-03 Thread Stanislav Brabec
Ludovic Rousseau wrote: > 2007/11/12, Stanislav Brabec <[EMAIL PROTECTED]>: > > I am maintaining Smart Card packages in OpenSUSE. > > > > To simplify understanding of Smart Card protocols and implementation, I > > prepared a dependency and protocol diagram. > > > > Feel free to send me notes, sugg

Re: [opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Simon Eisenmann
Am Montag, den 03.12.2007, 15:01 +0100 schrieb Simon Eisenmann: > > In the meanwhile i tried this on a windows machine, which was able to > create a valid csr (on windows) on the same card. So this seems > somehow > related to my linux system. Maybe openct is the error as this is not > used on wi

Re: [opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Douglas E. Engert
Simon Eisenmann wrote: > Am Montag, den 03.12.2007, 15:01 +0100 schrieb Simon Eisenmann: >> In the meanwhile i tried this on a windows machine, which was able to >> create a valid csr (on windows) on the same card. So this seems >> somehow >> related to my linux system. Maybe openct is the error

Re: [opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Simon Eisenmann
Am Montag, den 03.12.2007, 10:20 -0600 schrieb Douglas E. Engert: > > max_send_size = 252; > > max_recv_size = 252; > > > > it does not work (this is the default on ubuntu). When i remove this, i > > can use schlumberger e-gate 32K with 2048bit key without any problem > > with my CCID readers. I

Re: [opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Douglas E. Engert
Simon Eisenmann wrote: > Am Montag, den 03.12.2007, 10:20 -0600 schrieb Douglas E. Engert: >>> max_send_size = 252; >>> max_recv_size = 252; >>> >>> it does not work (this is the default on ubuntu). When i remove this, i >>> can use schlumberger e-gate 32K with 2048bit key without any problem >>>

Re: [opensc-devel] Smart Card documentation diagram - draft

2007-12-03 Thread Ludovic Rousseau
2007/12/3, Stanislav Brabec <[EMAIL PROTECTED]>: > I have just incorporated your comments and created a new version: > > http://en.opensuse.org/Smart_Cards Some new comments: - the PKCS#11 API [1] is composed of functions C_* like C_Initialize, C_GetSlotList, etc. The sc_pkcs11_* functions are not

Re: [opensc-devel] Invalid CSR is created with E-GATE 32K rsa/2048

2007-12-03 Thread Ludovic Rousseau
2007/12/3, Douglas E. Engert <[EMAIL PROTECTED]>: > If the card works with pcsc but not openct, there might be a problem > with openct. The RSA operations with 2048 require more then one packet > to/from the card. May also be pcsc can handle the SCR and SPR readers better. Yes. My CCID driver may