#smartcard — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #smartcard, aggregated by home.social.
-
OpenPGP-Karte eingerichtet: Curve 25519 scheitert am Kartenlimit, die Unterschlüssel landen trotzdem in Hardware
Kann eine OpenPGP-Karte den Primärschlüssel aus dem Ed25519-Beitrag offline vorhalten? Kurz: nein, es fehlt der Zertifizierungsslot dafür. Aber sie bindet die drei täglich genutzten Unterschlüssel hardwaregebunden, inklusive Kartenlimit bei Curve 25519 und einem gemessenen PIN-Timeout am Pinpad. -
Hmmm, the systemd-cryptsetup initramfs-hook does not include pcsc into the initrd when specifying to use FIDO2. Fair, I assume there are not many people who use classical Smartcards via PC/SC and FIDO2 in their initrd, right ?
Damn, now need to figure out how to get this working in a clean manner.
-
Quantum-secure NFC and eSIM chip for smartphones and smartwatches
In the tiny ST54M, STMicroelectronics combines two ARM cores with a hardware accelerator for the PQC algorithms ML-KEM (FIPS-203) and ML-DSA (FIPS-204).
-
Quantensicherer NFC- und eSIM-Chip für Smartphones und Smartwatches
Im winzigen ST54M vereint STMicroelectronics zwei ARM-Kerne mit einem Hardware-Beschleuniger für die PQC-Algorithmen ML-KEM (FIPS-203) und ML-DSA (FIPS-204).
-
Anyone knows a retailer of #Token2 ? Both their PIN+ TypeC Rel3.3 and their PIN+ NFC Card Rel3.3 are out of stock - sadly the two items I'd love to have.
Any alternative places to get them - or other #FIDO2 #Smartcard suggestions ?
-
After circumventing the country block to add my Glasgow Subway smartcard to a ZoneCard account, I was wondering: what happens to the remaining subway credit on my card if I load a weekly ticket onto it, and I then take the subway?
I’d hope the credit remains untouched during that week, but I thought I’d better check…
#Glasgow #PublicTransport #SmartCard #ZoneCard #GlasgowSubway -
Hello and welcome to the #nakeddiefriday again. This one will be a continuation of the previous one with the same exhibit but in more depth. :-)
To remind you, this is the unnamed smartcard IC, which I believe was fabbed by Samsung.
Let's try removing some metal from the top. 🧵
-
And that's about it for this issue, dear friends. A lot of images with not a lot of analysis. I hope that's okay.
As you might have noticed, I have a particular interest in #smartcard chips. :-) And I always appreciate donations. ;-) Whether you send in your old SIM cards or grab some from "gold recovery" lots on eBay, everything is welcome. Or you can also join my Patreon so I can buy them myself.
On that positive note, thanks for looking at my images and I hope to entertain you again next Friday. Have a nice rest of the week!
-
Greetings and welcome to today's #nakeddiefriday installment.
Today's guest is a smartcard chip, for which I do not know the actual p/n -- only it's die marking: M7690-G1, by Infineon. This came from a SIM card. The chip had polyimide on top which had to be stripped off, hence the damage on some top metal.
Unfortunately, power distribution routing and CMP dummy fill obstructs the majority of the detail. 🧵
-
I take "completely deranged file formats for 500 please"
*scrolls*
*rubs eyes*
*pours double shot*
*downs shot*"what is pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist?"
-
I ran into a weird edge case where the openpgp-card-ssh-agent Rust crate panics when encountering a non-OpenPGP smartcard (in my case, a corporate MyEID card for Kerberos). This bricked my SSH agent setup whenever both cards were inserted.
Instead of waiting for an upstream patch, I wrote a quick LD_PRELOAD hook to intercept the PC/SC API (winscard.h). It wraps SCardListReaders and filters out the problematic reader ID from the multi-string buffer before returning it to the application.
It’s a rather dirty hack, but it allows two incompatible security stacks to coexist perfectly. Write-up and C code here:
https://blog.hofstede.it/card-wars-hiding-smartcard-readers-from-eager-rust-agents-with-ld_preload/
#linux #smartcard #nitrokey #devops #security #programming
//cc @hko -- Maybe you find that interesting as well :)
-
What a project. Did configure StepCA in my home-lab with a real physical HSM for the CA's private key. Using a SmartcardHSM (https://www.smartcard-hsm.com) from CardContact Systems.
Now I have acme (automated cert provisioning) working internally as long as the HSM is plugged into my server.
All running in an isolated FreeBSD 15-RELEASE jail (StepCA compiled from source with added PCSC-Lite support and usb device passed through by devfs rules).
Yay! It works!
#freebsd #stepca #devops #acme #certificates #tls #smartcard #hsm
-
Yay!
I got SmartCard authentication with PKINIT/Kerberos working in my home-network/home-lab 🙂
RSA key safely stored on the smartcard, getting a ticket granting ticket (TGT) from the KDC and then authenticating to an SSH host via GSSAPI/Kerberos..
Total overkill for a home-lab? Absolutely! But it's always amazing to learn something new and to have hands-on experience.
Client: Fedora 43 KDE Edition
KRB Realm: FreeIPA on Fedora ServerRemote-Server: FreeBSD 15.0-RELEASE machine (krb5 enrolled).
#linux #smartcard #authentication #ssh #gssapi #kerberos #crypto #freebsd
-
Aaaaaand I've done the manual upgrade from tails 6.x to 7.1 :D A round of applause for the #tails @tails team (which, as I understand it, has merged with the @torproject team #tor). The walk-through steps on the website are straightforward (it feels like a technical writer actually spent some time working with the language and with readers/users to iron out kinks). The on-boarding experience for new installs once you've loaded it up is great too! Setting up a new persistent storage volume and configuring it was a breeze.
I effectively use tails as a not-quite-airgap environment for when I need to fiddle with #pki #pgp #OpenPGP #gpg stuff (I made updates to my public key notations for #KeyOxide @keyoxide). All of that worked flawlessly too, including with a #SmartCard reader.
-
heise+ | Wie quantensichere Kryptografie Computer langfristig absichert
Große und mächtige Quantencomputer bedrohen in der Zukunft die klassischen kryptografischen Verfahren. Doch es gibt eine Lösung: Post-Quanten-Kryptografie.
-
I'm incredibly proud and grateful that "Money for Nothing, Chips for Free," my account of some delightful (unpublished) #smartcard #hacking that we did in my lab 25 years ago, appeared in #Phrack72 https://phrack.org/issues/72/14_md#article
@dugsong dropped off a rare hardcopy and (awesome!) challenge coin
-
Critical vuln(s?) found in FeliCa contactless RFID smart cards for payment and ID shipped before 2017, Sony admits
https://www.sankei.com/article/20250828-SKORFRXOVBKMBMAEXZNVCRNHQA/
-
Wow is the documentation for Smartcards shit. Like it impossible to even figure the basics out.
Like e.g. how do I delete the private key from this card? Why does "pkcs11-tool -b" not work? Why does it reply with a login error when I enter the correct pin and with an internal error if I enter an invalid one?
???? -
The amazing openpgp-card-tools(1) and openpgp-card-ssh-agent(2) compile and work perfectly fine on FreeBSD 14.3-RELEASE.
Can properly use my OpenPGP card to authenticate against SSH servers and use oct to manage my cards.
The only preperations, I had to make in order for it to work:
pkg install pcsc-lite pcsc-tools ccid
sysrc pcscd_enable="YES"Amazing! I love those utilities from @hko
1: https://crates.io/crates/openpgp-card-tools
2: https://crates.io/crates/openpgp-card-ssh-agent -
Iemand ervaring met de #Rhinokey #Smartcard als alternatief voor de #Apple #Airtag? Is het bedrijf betrouwbaar? Het vermelde nummer van de Kamer van Koophandel staat op een andere firmanaam en op een ander adres. Bovendien zou er maar één werknemer zijn.
-
'Why is the government privatising the management of welfare payments instead of administering them directly?' #Australia #auspol #AustralianPolitics #welfare #SocialSecurity #SmartCard #Indue ##RaiseTheRate #LaborFail ##AnthonyAlbanese https://theaimn.net/how-the-smartcard-continues-the-failures-of-the-indue-card/
-
How the SmartCard Continues the Failures of the Indue Card
#SmartCard #WelfareRights #PublicMoney #SocialJustice #MonetarySovereigntyThe SmartCard replaced the Indue Card, but has anything changed? Discover the truth behind its restrictions, privatisation, and better welfare alternatives.
https://socialjusticeaustralia.com.au/smartcard-welfare-failure/