Questions tagged [opensc]

OpenSC provides a set of libraries and utilities to work with smart cards.

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS#11 API so applications supporting this API (such as Mozilla Firefox and Thunderbird) can use it. On the card OpenSC implements the PKCS#15 standard and aims to be compatible with every software/card that does so, too.

More info on OpenSC project wiki.

55 questions
13
votes
3 answers

Openssl, engine_pkcs11, libp11/OpenSC

Friends, I have a smart card, which I want to integrate OpenSSL. Plan to do this through a system of "ENGINE" in OpenSSL. However, I have a problem with understanding. The fact that there are such things as engine_pkcs11, opensc, libp11,…
user1650740
  • 131
  • 1
  • 1
  • 5
5
votes
1 answer

Hot to use mechanisms CKM_ECDH1_DERIVE with pkcs11interop

I bought a NitroKey HSM and wanted to derive a secret with EC. Previosly question For this, I want to use the CKM_ECDH1_DERIVE mechanisms. Which is supported by this HSM, see: Referring to the PKCS#11 specification this must be considered: The…
hdev
  • 6,097
  • 1
  • 45
  • 62
5
votes
0 answers

Opensc in android

Softwares(such as Mozilla Firefox, Thunderbird) can load opensc module(opensc-pkcs11.so on linux and opensc-pkcs11.dll on windows)and use all smart cards supported by OpenSC for authentication, signing and decryption. My question is how can we do…
4
votes
0 answers

How to establish TLS connection using HSM and OpenSsl

Background I have inherited the task to establish TLS 1.2 connection with server using cryptography token programmatically. The token in question is a read-only - does not allow extraction of private key - smart card. This token have been…
raidensan
  • 1,099
  • 13
  • 31
4
votes
2 answers

Encrypting a data with a public key using pkcs11 module fails

I am using Python's pkcs11 package to access an X.509 certificate stored on my Yubikey 5. Accessing the certificate, public and private keys using pkcs11 Objects work fine as is signing and signature verification. Howerver, for the life of me, I…
Proto Ukr
  • 492
  • 4
  • 13
4
votes
1 answer

How to use OpenSC to decrypt a message with a private key from a smartcard

We've recently updated to OpenSC 0.15.0 and for some reason we can no longer use it to decrypt a message with the private key from a smartcard. Apparently the same happens whether we use the pkcs11-tool (providaded with OpenSC) and the OpenSSL…
3
votes
2 answers

What is CAN and how to provide it

I'm working on Polish e-identity card which is protected by CAN code. It is required to provide this code to unlock the card and be able to list the tokens. I'm not able to find any information about it. When using official app…
majkrzak
  • 1,332
  • 3
  • 14
  • 30
3
votes
0 answers

engine_pkcs11 and softhsm with ECC keys

I have softhsm-v2.5.0-rc1 which has ec keys imported in it. Now, when I try to use these keys from openssl CLI using the pkcs11 engine, it fails. SoftHSM version []:~$ softhsm2-util --version 2.5.0rc1 SoftHSM token init []:~$ softhsm2-util…
Paras Shah
  • 61
  • 6
3
votes
0 answers

java pkcs11 slot detection issue with OpenSC if smartcard is removed and inserted again

Background information Which might help in alaysis : From a web application i am trying to connect to smart card and read certificates from a java program which runs on client machine to perform some signing operation. I am using Opensc-PKCS11.dll…
2
votes
1 answer

OpenSC vs openCryptoKI

Which library is more popular for Linux and Mac OS operating systems and what advantages and disadvantages there are for supporting PKCS#11 standard for smart cards? Is there any tutorial about adding PKCS#11 support for smart cards?
Noro
  • 1,643
  • 5
  • 22
  • 38
2
votes
1 answer

Smart Card Simulation on Ubuntu (Java Card - ISO7816) - specifying target JCRE

I'm trying to simulate the OpenPGP and IsoApplet before building and installing on a real javacard. I'd like my simulation environment to match the actual card as closely as possible. Here are my card specs from the ATR database. It follows the Java…
Jared
  • 3,651
  • 11
  • 39
  • 64
2
votes
2 answers

Is OpenSC fully based on PC/SC or does it also use different commands?

I am trying to learn the basics of smart card programming and I would like to add support for PKCS#11 to a card. The vendor does not provide any PKCS#11 module, so I would like to use OpenSC (the card is not listed as compatible with OpenSC). As far…
matteof93
  • 43
  • 9
2
votes
1 answer

PKCS11 Windows invalid engine YubiHSM2

it's me again. I am working with a YubiHSM2 HSM Module and I am trying to set it up for the use of pkcs11 engine which will allow me to use OpenSSL with the HSM. I am implementing this on Windows, which brings me a lot of trouble. I HAVE installed…
LikeAKemper
  • 155
  • 2
  • 12
2
votes
1 answer

pkcs#11 CKR_DEVICE_REMOVED error logging in to HSM

I have the SmartCard HSM usb plugged in to my laptop. I can see it when I run a command thru an application using the PKCS#11 API: Slot 0 Slot info: Description: Identiv uTrust 3512 SAM slot Token [CCID Interface] (55511725602 …
ejohnson
  • 139
  • 1
  • 4
  • 16
2
votes
0 answers

Aladdin eToken smartcard not showing on keychain access app - OSX High sierra

I am having Aladdin eToken smart card and installed TokenD using OpenSC package for Mac.But inserted smart card certificate is not showing the in Keycahin access app. do I need to install any additional drivers on Mac? After OpenSC package…
iSpark
  • 952
  • 7
  • 18
1
2 3 4