OpenPGP Card

[Benjamin Donnachie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joe Smith wrote:
> There is no need to post a message to the list three times.

I didn't.  I posted it to gnupg-users and -devel as I felt my enquiry
was equally suited to both lists.

> You can get aditional information, but unfortunately the information
> available is not to particularly satisfying.

Yup - that's exactly what I've discovered!

> Source code is not available. Here is a quote from an email Werner sent me:
[...]

>> No, this is not possible because the chip vendors supply chips only to
>> large card vendors due to fear of litigation through Pay TV channels.
>> They had pretty bad experience with that in recent years.  Same goes
>> with the firmare supplied with the chip which is the base of the
>> (actual very small) application we did.  Atmel will even stop the
>> production of the chip we are currently using due to force by Pay TV
>> lawyers (the same chip is used in many Pay TV scrambling systems; and
>> they all use security by litigation).  Its all a very sad and
>> ridiculous situation.

I agree with Werner - it is a very sad and ridiculous situation!

> If you can somehow manage to get ahold of a BasicCard OS-based smartcard
> that has support for RSA, it would not be too difficult to program it.
> Most of the crypto stuff is handled by the chip, so the code needed to
> be written is mainly interface code.

I shall stop being so lazy, and shall see what can be done!

Take care,

Ben

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
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=5vX+
-----END PGP SIGNATURE-----