Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID)

[Frank M. <fra...@gm...>]

According to the docs there aren't any PKI applications (e.g. GIDS) on your
token by default (https://www.ftsafe.com/products/FIDO/Single_Button_FIDO).
You need to contact the vendor instead of this list.

2018-01-07 23:19 GMT+01:00 Ian Hill <we...@us...>:

> Thanks, I know that, however with this usb key you can also enable smart
> card mode (CCID) as well using the Feitian application, which I have done.
> Similar to the Yubikey 4 and Neo.
>
> The output file I attached previously shows that the usb is a valid CCID
> smart card and Ludovic of libccid has this usb on his 'should work's list.
> The only issue seems to be that there is not a Opensc driver, perhaps based
> on an update to the Feitian ePass2003 usb smart card.
>
> Note this is totally separate to U2F mode, which I can actually disable if
> required.
>
> On Sun, 7 Jan 2018, 10:11 pm Bernd Eckenfels, <ec...@zu...>
> wrote:
>
>> You cannot store certificates or keys on a U2F only device, it only
>> supports the U2F features for key derivation.
>>
>> Gruss
>> Bernd
>> --
>> http://bernd.eckenfels.net
>> ------------------------------
>> *From:* Ian Hill <we...@us...>
>> *Sent:* Sunday, January 7, 2018 10:27:39 PM
>> *To:* Frank Morgner
>> *Cc:* Bernd Eckenfels; ope...@li...
>> *Subject:* Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID)
>>
>>
>> Thanks, this usb supports both U2F and CCID,  the U2F works as expected,
>> however, having enabled the CCID mode although it is recognised as a CCID
>> card under libccid there is no suitable driver in Opensc.
>>
>> If anyone can help with the driver I can test it this end.
>>
>> On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <fra...@gm...>
>> wrote:
>>
>>> U2F is yet an other token standard. So, by design, it is not to be used
>>> with the APIs that OpenSC is offering. However, that should not be a
>>> problem, because U2F capable applications should have native support for
>>> your token without the need of OpenSC.
>>>
>>>
>>> In theory we could add low level support for U2F and even some PKCS#11
>>> wrapping for U2F into OpenSC. But currently there are no applications that
>>> have use for this.
>>>
>>> 2018-01-06 22:20 GMT+01:00 Ian Hill <we...@us...>:
>>>
>>>> Yep, it's the U2F version and that works fine, however, I would like to
>>>> add gpg keys to it and have enabled U2F & CCID mode.
>>>>
>>>> It is now recognised by libccid using the latest stable version but not
>>>> recognised by Opensc.
>>>>
>>>> I assume if I can get Opensc working I should be able to add either gpg
>>>> or RSA keys to the smart card.
>>>>
>>>> On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...>
>>>> wrote:
>>>>
>>>>> Sounds like Fido Universal Two Factor. Chrome should be able to use
>>>>> that as a login token. (There is for example a Yubikey U2F Token which
>>>>> works great with Chrome)
>>>>>
>>>>> Gruss
>>>>> Bernd
>>>>> --
>>>>> http://bernd.eckenfels.net
>>>>> ------------------------------
>>>>> *From:* Ian Hill <we...@us...>
>>>>> *Sent:* Saturday, January 6, 2018 6:57:03 PM
>>>>> *To:* ope...@li...
>>>>> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID)
>>>>>
>>>>> Hi
>>>>>
>>>>> I have the following card which I have managed to find with libccid,
>>>>> however, it is not supported by OpenSC.
>>>>>
>>>>> $ opensc-tool --atr
>>>>> Using reader with a card: FT U2F CCID [CCID] 00 00
>>>>> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2
>>>>>
>>>>>
>>>>> Is there a driver in the works, or can I help with any information?
>>>>>
>>>>>
>>>>> Ian
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>> ------------------------------------------------------------
>>>> ------------------
>>>> Check out the vibrant tech community on one of the world's most
>>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>> _______________________________________________
>>>> Opensc-devel mailing list
>>>> Ope...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>>>>
>>>>
>>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot______
>> _________________________________________
>> Opensc-devel mailing list
>> Ope...@li...
>> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Opensc-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>
>