Re: [Smartsign-users] Using the CardEdge Token

[Tommaso C. <cuc...@ss...>]

Tiphaine Turpin wrote:
> Hi,

Hi,

> I'm interested in javacard applets with security concerns, and I would like to
> get  CardEdge to work. Could anyone tell me just a few words about what
> software;
> what are the packages required, for what purpose, and what dependencies ? In
> other words I need some update to the Smart Sign download page (which is quite
> old) :
> http://smartsign.sourceforge.net/download-info.html

first, you have to set the MuscleCard middleware up on the host.
You can find all the components at the URL http://www.musclecard.com
(despite the domain, everything is free software).

Briefly, you need PCSC-Lite, with MuscleCard enabled. Currently, Debian
distributors maintain packages for Linux Debian, otherwise you may
recompile sources by yourself (remember to enable musclecard).

Then, you'll need the PCSC-Lite drivers for the reader and card devices
you're actually using.

Also, check out various utilities like XCardII and MuscleTools which
may help you in setting up things.

If you're using a JavaCard, you need to load the MUSCLE CardEdge Applet
on the device. You may do this step by using the CardEdgeAppletLoader by
Martin Buechler (open-source loader), which is based on the
OpenCardFramework (OCF), thus you need to set OCF up too. The
alternative is to use the proprietary loader which comes with your
card, if any.

Once loaded, Applet must be instantiated (the loader cited above
allows to do it), then initialized (MuscleTool allows you to initialize
the Applet).

Finally, you may either use the SmartSign PKCS#11, or the MuscleCard
PKCS#11 (which you can find within the MuscleFramework package), along
with the other Smart Sign applications (like OpenSSH-MCard, QSign-MCard
and Sign-MCard).

Hope this gives you a general overview on what you need to do.
Actually, it's not that long.

Bye,
	T.

> about the javacard pkcs11 token specifically.
> Thanks,
> 
> Tiphaine Turpin
> 
> 
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now. 
> http://productguide.itmanagersjournal.com/
> _______________________________________________
> Smartsign-users mailing list
> Sma...@li...
> https://lists.sourceforge.net/lists/listinfo/smartsign-users
> 

-- 
,------------------------------------------------.
|  Tommaso Cucinotta <t.cucinotta *at* sssup.it> |
 >------------------------------------------------<
!     Scuola Superiore di Studi Universitari     !
!            e Perfezionamento S.Anna            !
!  Pisa                                   Italy  !
`------------------------------------------------'