13.11.2014 Views

Smartcard quickstarter guide Why use smartcards? - GOOZE ...

Smartcard quickstarter guide Why use smartcards? - GOOZE ...

Smartcard quickstarter guide Why use smartcards? - GOOZE ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>Smartcard</strong> <strong>quickstarter</strong> <strong>guide</strong><br />

PIN [User PIN]<br />

Com. Flags: 0x3<br />

ID : 01<br />

Flags : [0x32], local, initialized, needs-padding<br />

Length : min_len:4, max_len:16, stored_len:16<br />

Pad char : 0x00<br />

Reference : 1<br />

Type : ascii-numeric<br />

Path : 3f005015<br />

In this case, the PIN code has ID 01. You will <strong>use</strong> this ID later on in the <strong>guide</strong>.<br />

Optimizing space on smartcard<br />

The Feitian PKI offers a 64 Kb space on smartcard. The space for public keys, private keys, certificates, etc ..., are configurable.<br />

For advanced <strong>use</strong>rs, read: Tuning smartcard file system [40].<br />

Managing PIN codes<br />

Warning<br />

The PIN code protects access to your smart card.<br />

It is asked whenever you access your smart card.<br />

There are two levels of protection codes:<br />

PIN code: the normal access PIN code. The PIN code should be easy to remind and should be learned by heart. Usually it<br />

contains only numbers. If you live in Europe and <strong>use</strong> a credit card, this is the equivalent of your credit card PIN number.<br />

PUK code: personal unblocking code <strong>use</strong>d when the PIN code was lost. You should always code down you PUK code and<br />

keep it in a safe place. In a production environment, it should be very log to protect against brute force attack.<br />

Listing PIN codes<br />

To list existing PIN codes:<br />

$ pkcs15-tool --list-pins<br />

Using reader with a card: Feitian SCR301 01 00<br />

PIN [User PIN]<br />

Com. Flags: 0x3<br />

ID : 01<br />

Flags : [0x32], local, initialized, needs-padding<br />

Length : min_len:4, max_len:16, stored_len:16<br />

Pad char : 0x00<br />

Reference : 1<br />

Type : ascii-numeric<br />

Path :<br />

Copyright <strong>GOOZE</strong> 2010-2011 http://www.gooze.eu 34 / 63

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!