Smart card reader security

Thomas Harning Jr. harningt at
Fri Oct 18 02:00:59 CEST 2013

Wow, that's a lot of firmware space for something that looks so
simple. Hopefully they open-source the firmware (though I suppose they
should shove unsightly decryption key absconding code in the firmware
that runs the firmware).
One could also be concerned about regular readers... there's alot of
space they "could" be putting storage space for decryption keys so
that if the device is "lost" or "shipped for manufacturer servicing"
they can pull them off.

In short, it's really hard to be sure that anything is safe. You have
to start somewhere.

On Thu, Oct 17, 2013 at 11:55 AM, Christian Weinz
<christian.weinz at> wrote:
> Hello,
> I bought a cyberJack go [1] to use it with my openPGP smart card for
> authentification. Since the firmware of that device is upgradeable and
> is capable of saving atleast 2 GB of data, how can I be sure it is not a
> security threat by saving sensitive data?
> Best regards,
> Christian Weinz
> [1]
> _______________________________________________
> Gnupg-users mailing list
> Gnupg-users at

Thomas Harning Jr. (

More information about the Gnupg-users mailing list