Cryptography Stack Exchange
Cryptography Stack Exchange

Questions tagged [smartcard]

A smart card, chip card, or integrated circuit card is a physical electronic authorization device, used to control access to a resource. It is typically a plastic credit card-sized card with an embedded integrated circuit chip.

Ref: Wikipedia.

15 questions
6
votes
2 answers

power consumption in a XOR

I'm trying to understand how a XOR affect traces of power consumption in a Differential Power Analysis on smartcards. What's the difference in energy radiated in a $1 \oplus 1$ and in a $0 \oplus 1$? If I understand correctly we have a XOR gate, and…
David 天宇 Wong
  • 1,595
  • 11
  • 27
5
votes
2 answers

Smart Card - Entropy during on-board public key generation

I know that some (advanced) smart cards or tokens allow generating key pair directly on the device, but I wonder how the card can gather entropy during the process. Any idea ?
crypto-learner
  • 347
  • 1
  • 4
  • 11
4
votes
1 answer

Are additional PGP subkeys still needed for smartcards?

After having purchased a USB GnuPG smartcard, I visited the manufacturer's website. A tutorial by the FSFE was mentioned there as the preferred way of setting up the smartcard. However, this tutorial seems to be a bit outdated as the output of gpg…
hansjoachim
  • 43
  • 4
3
votes
1 answer

Using YubiKey to store a PIN-protected secret for disk encryption

I want to store a secret on YubiKey and use it for disk encryption. It's crucial that it be PIN protected. There are a limited number of PIN tries, and after three attempts the YubiKey would be blocked (self-destructed). All the solutions I have…
smrt28
  • 610
  • 6
  • 10
3
votes
1 answer

Is using a smart card and password two-factor authentication?

I use a smart card - as read only device - for user identity as well as a password: The smart card (holds the user ID) is something I have; The password is something I know. Is this still two-factor authentication?
Wei Wen
  • 315
  • 3
  • 12
3
votes
1 answer

How SAM modules secure transactions?

As you know SAM Modules are used mainly in the electronic payment industry. Due to the low security of key storing in general storage devices or MCUs, Manufacturers used SAM modules for secure storing and transfering data between processor and the…
Mahmoud HD
  • 31
  • 5
2
votes
0 answers

GPG Sub Key Renewal Questions

Last year, I followed this guide to create two GnuPG Smart Cards; one card with the Primary Key and the other card with the Sub-keys. I noticed that the sub keys were close to expiring so I renewed them and sent them to the sub-key Smart Card and…
chuckn246
  • 21
  • 4
2
votes
1 answer

Use Smart Card to decrypt files

So I'm trying to figure out the feasibility of using a Smart Card to decrypt files in an offline scenario. I wish to sync encrypted files to a mobile phone with a Smart Card reader case. The files should only be readable when the Smart Card is in…
Magnus
  • 145
  • 1
  • 5
2
votes
1 answer

PKCS#11 Sessions

I am maintaining an application that uses PKCS#11 to talk to a smartcard. Somehow a session gets generated, but i cant figure out where in the code. I am using c# and the PKCS11Interop wrapper. The funny thing is that if in my main application i do…
randoms
  • 131
  • 4
2
votes
0 answers

How far is public-key crypto involved in "banking world"?

I would like to know how public key cryptography is used in the banking world. I am not looking for big details, but for example: Are banking card embedding a private key used for signing (authenticating) user transactions? During a transaction…
crypto-learner
  • 347
  • 1
  • 4
  • 11
2
votes
2 answers

How to counter fault injections on smartcards?

Fault injections on smartcards or other hardware seem to be an issue for low risk tolerant environments. What are possible countermeasures to fault injections? From my research, it all depends on what attacker can do. Assuming they can do everything…
Molo4
  • 31
  • 1
2
votes
0 answers

Could a Yubikey Provide the Optional Secret to OPAQUE When Using Argon2?

I've been studying the OPAQUE protocol, and I like it (so far). The RFC suggests using Argon2 as the Key-Stretching Function. Argon2 can take an optional "Secret value" (2, page 5). I had the idea that that secret value could be provided by a…
Gavin D. Howard
  • 121
  • 2
2
votes
2 answers

What AES mode does the CMAC use in Secure Channel Protocol 3 (SCP03)?

I am looking to verify a card cryptogram sent from a smart card chip in accordance with SCP03. According to the SCP03 spec, the CMAC is used to generate a MAC to authenticate messages sent to/from the secure element. The SCP03 spec says that AES in…
veda-s4dhak
  • 21
  • 2
1
vote
0 answers

Safest method for encrypting a file on a local machine

I am looking for a safe method to encrypt a local file on my machine. Let's say I have a file containing my logins and passwords -- how can I make sure that the encryption is reasonably sufficient in case this file falls into the wrong hands? I have…
Proto Ukr
  • 153
  • 4
0
votes
2 answers

Secure Key exchange using javacard applet

I am working on a javacard applet project where i need... Secure communication between two applets let say there is applet A and applet B. Let say both applet has their own RSA key pairs. Now I want to perform Diffie-Hellman key exchange between…
Anurag Sharma
  • 111
  • 4