Smartcard quickstarter guide Why use smartcards? - GOOZE ...

Smartcard quickstarter guide
Type : ascii-numeric
Path : 3f005015
Private RSA Key [Private Key]
Object Flags : [0x3], private, modifiable
Usage : [0x10E], decrypt, sign, signRecover, derive
Access Flags : [0x0]
ModLength : 2048
Key ref : 1
Native : yes
Path : 3f005015
Auth ID : 01
ID : 2649a19d5d6a216913c5a0c8bb9f97229dec99ab
X.509 Certificate [/CN=***********/emailAddress=@***********]
Object Flags : [0x2], modifiable
Authority : no
Path : 3f0050153100
ID : 2649a19d5d6a216913c5a0c8bb9f97229dec99ab
Encoded serial : 02 03 00C520
X.509 Certificate [/O=CAcert Inc./OU=http://www.CAcert.org/CN=CAcert Class 3 Root]
Object Flags : [0x2], modifiable
Authority : yes
Path : 3f0050153101
ID : ef47e5fca7e04e356d41b0192d725eb0e54fc3af
Encoded serial : 02 01 01
X.509 Certificate [/O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing
Authority/emailAddress=support@cacert.org]
Object Flags : [0x2], modifiable
Authority : yes
Path : 3f0050153102
ID : c81e42ceda0bc1d65c9051b0eb8679e29dd6c067
Encoded serial : 02 01 00
As you notice, this command transfers private RSA key, X.509 certificates and CA root certificate.
There is no need to import the RSA public key as it can be derived from RSA public key.
Scenario 2: creating a self-signed certificate on computer
In this section, we will generate an RSA key and then transfer it to card.
The pros : you may transfer your PEM key to a CD-ROM and store it in a safe place. Remove your key from the computer, so that
it resides only on the smart card. If the smart card is lost or destroyed, you can initialize a new smart card.
The cons : this solution is not considered perfectly secure. If your computer is compromised, the secret key may be
compromised.
Warning: always make a backup of the original file containing RSA keys and certificates.
Copyright GOOZE 2010-2011 http://www.gooze.eu 38 / 63