#smartcards — Public Fediverse posts

⏱️ CCAT research on smart card security at #ARES2026

The 21st International Conference on Availability, Reliability and Security (ARES 2026) will take place on 24–27 August in Linköping, Sweden ➡️ https://ares-conference.eu

CCAT researchers will present a methodology for detecting timing side-channel vulnerabilities in #JavaCard applications, tested on real #smartcards.

The detection and testing were conducted using 💠 JCProfilerNext 💠 – part of the #SCRUTINY toolset developed by CCAT.

BONUS CONTENT!

Hitachi HD651350, another smartcard from year 2000.

The process looks exactly the same as with HD6483164, and I recognize some custom-made blocks as well. Might only be a tweak of memory sizes? The EEPROM is rather large here.

Full-res map: http://infosecdj.net/map/hitachi/hd651350/infosecdj_mz_nikpa40x/

#electronics #reverseengineering #smartcards

Hello and welcome to #NakedDieFriday! This time with proper capitalisation. :-)

The die of today is named HD6483153 and is designed by Hitachi. It fell out of a SIM card. I do not know what commercial p/n this is, if it was ever assigned one. If anyone can provide any details on what smart cards were made by Hitachi, please do so! In the meantime, we shall explore a bit. 🧵

Full-res map: http://infosecdj.net/map/hitachi/hd6483153/infosecdj_mz_nikpa40x_2/

EDIT: This is H8/3153, part of the H8/3150 series.

#electronics #reverseengineering #smartcards

Hello, wonderful people. Taking a break is good, so I am taking a couple moments to write the #nakeddiefriday post of the week.

Today we have this interesting sample. Yes, it has certainly seen better days; been sitting in a queue for a real while now. This is again a smartcard chip without a name to it. I believe this to be fabbed by Samsung, and be rather old. The chip is built using poly-gate CMOS with 3 metal layers; later processes moved to a higher layer count.

#electronics #smartcards #reverseengineering

#Newsboat und #Wallabag - Mehrere Smart Cards und unterschiedliche Betriebssystem verwenden

Newsboat kann über die API Artikel direkt an Wallabag senden. Dort können die Beiträge bequem und übersichtlich verwaltet, mit Tags versehen und im Webbrowser oder der Wallabag-Apps auf allen Endgeräten gelesen werden.

In diesem Beitrag werden mehrere Clients und #Smartcards (#YubiKey und #Nitrokey) verwendet, um interessante Artikel an die zentrale Wallabag-Instanz senden.

https://strobelstefan.de/blog/2026/03/08/newsboat_und_wallabag_-_mehrere_smart_cards_und_unterschiedliche_betriebssystem_verwenden.html

Does anybody know what elementary file 2FE4 contain on SIM cards? It doesn't look like it is described in any standards I've looked at, and its contents varies widely across cards. Maybe boost for reach?

#electronics #smartcards

Hello! It's #nakeddiefriday today, and what I got for you is yet another smartcard chip. Please welcome an unnamed die marked K2D0A, fabbed by STMicro. This came from [REDACTED], used to [REDACTED]. The die oriented with power supply pads on top, so it's possible to figure out which die pads correspond to which module pads. Unusually enough, there are 6 pads bonded out; the function of the extra
pad is not known at this time-- certainly not VPP.

A short thread follows.

#electronics #reverseengineering #smartcards

Zwei neue Forschungsprojekte der @Cyberagentur starten im Programm SCA4PQC. Sie zielen auf sichere Post-Quanten-Kryptographie – robust gegen physikalische Seitenkanalangriffe. Mit dabei: LEAP-CSP (Cloud & KI) und SPARTAQUS (Smartcards).
Mehr zur Zukunft der Kryptographie: https://t1p.de/gj3aa
#PostQuantum #Kryptographie #Seitenkanal #Cybersicherheit #Smartcards #CloudSecurity #Cyberagentur

#smartcards and #nuitka based project did not play nicely. No clue what went wrong, but I don't have free brain cycles to debug.

I'm looking for a good overview/comparison of different #MFA/#2FA or #PasswordLess authentication protocols.

The recent #Fido2 #MitM risk made me aware that I need to learn more.

Pointers and #BoostWelcome

#fedipower #wisdomOfTheCrowd #FollowerPower

As the best way to get an answer on the internet, is to state something wrong, let's try this 😜

#FIDO and FIDO2 are actually a whole set of (related?) protocols.
FIDO includes FIDO #UAF (Universal Authentication Framework) and FIDO #U2F (Universal Second Factor).

FIDO2 is the "successor" of FIDO and consists of two parts.
#WebAuthn and #CTAP (Client to Authenticator Protocol). From the name I would guess that WebAuthn is for web stuff (requiring browser support) and CTAP is for IT infrastructure stuff (???)

#Passkey is based on #Fido2
Other related concepts or protocols are #OTP (one-time passwords), #TOTP (Time-based One-time Password) and #HOTP (“H” in HOTP stands for Hash-based Message Authentication Code (HMAC))

Not sure how #SmartCards play into this.

And not sure which of these methods would work for an offline authentication login into your laptop (and ideally also as key for whole disk encryption)

anyone among my followers familiar with GlobalPlatform 2.3 "Annex A" certificates? Trying to wrap my head around how to reconcile them with X.509 and operate in a system that uses both those and X.509 certificates. #smartcards #followerpower

💳 Plastic money: the history of credit and debit cards with embedded computer chips

https://computer.rip/2023-09-03-plastic-money.html

#computers #payments #business #cards #smartcards #technology

Hackers can steal cryptographic keys by video-recording power LEDs 60 feet away - Enlarge / Left: a smart card reader processing the encryption key of an... - https://arstechnica.com/?p=1947319 #sidechannel #encryption #smartcards #features #biz&it

@AndreasSebayang ich versuche mir gerade einen Überblick über #Verkehrsverbund mit #eTicketDeutschland / Apps / #Smartcards und #Barcodes zu machen. Wollte nur wissen, ob es sowas bereits gibt?

Malware-Infested Smart Card Reader https://www.schneier.com/blog/archives/2022/05/malware-infested-smart-card-reader.html #Uncategorized #smartcards #malware

Malware-Infested Smart Card Reader

Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertent... https://www.schneier.com/blog/archives/2022/05/malware-infested-smart-card-reader.html

#Uncategorized #smartcards #malware

Близкие контакты. Как работают атаки на чиповые карты #smartcards #hack #подписчикам

https://t.co/zndziZu7rw https://t.co/nSNsKD0mwt

Источник: https://twitter.com/XakepRU/status/1364931998956089347

Why #smartcards are my favourite distraction? I don't know...

OpenSC [A000/0000/6350/4B43/532D/3135]> asn1 5031
A0 Context 0 (6 bytes)
30 SEQUENCE (4 bytes)
04 OCTET STRING (2 bytes): 44 00 D.
A1 Context 1 (6 bytes)
30 SEQUENCE (4 bytes)
04 OCTET STRING (2 bytes): 44 01 D.
A3 Context 3 (6 bytes)
30 SEQUENCE (4 bytes)
04 OCTET STRING (2 bytes): 44 03 D.
A4 Context 4 (6 bytes)
30 SEQUENCE (4 bytes)
04 OCTET STRING (2 bytes): 44 04 D.

#asn1 #asn1love