question on the smart card's mutual authentication process

I have a question about the process to authenticate each other between the smart card and the host application.

Basic knowledge
As far as I understand, use of the host application the KMC to derive the static key, the value of the card and this set of keys, the host application creates the set of session keys. He uses this session defined key to check the cryptogram of the map and generate cryptogram of the host.

Similar process is conducted by the card with the fact that static keys are stored in the vault of the smart card in the customization of the security field transmitter phase. It sends to the host application the cryptogram of the card.

Framework
I'm trying to review this process manually. I play the role of the host application and I have in hand the necessary cryptographic functions (Triple a) and Mac.

Question
I'm trying to calculate the MAC (cipher card) as described in section 5.4.1 of the CPS v1.1 (EMV card) but I can't receive the cryptogram of the card sent to me using the reference.
Is there more than 1 function of MAC (in theory) and this MAC function varies from one card to another manufacturer?

Thanks in advance
Best regards
JDL

There may be something in the API c# BouncyCastle (I don't do much dotnet so I have not tried) http://www.bouncycastle.org/csharp/

The MAC is relatively simple. There is a line where you encrypt a block of data at a time (as opposed to entire entry) and feed the result of an iteration in the next as the ICV (initial vector chaining). The original ICV value is 0x00 all.

See you soon,.
Shane

Tags: Java

Similar Questions

  • Smart card reader driver is sought on Windows update after inserting the smart card

    We are in the process of deploying PKI project in our environment. Client computers have Windows 7 Enterprise 64-bit SP1. We use McAfee Endpoint Encryption 5.2.12 on all clients. Our environment has a mix of Dell (Latitude E6400, E4300, E4310, E6410, E6420) and HP (EliteBook 8460p, EliteBook 2560p) laptops. There's no problem with Dell laptops at all.

    With HP machines, however there are two problems.
    1. with the model 8460p, after installing the Alcor card reader driver, when I insert the smart card into the reader he begins to search for the drivers on windows update. In three minutes, it updates the drivers and works very well. My concern is when I install the card reader drivers explicitly why go to Windows update. HP 2560p also has the same card reader, but this problem is not on this model. I disabled the driver smart card research in strategy group as well. This behaviour is sparkle roll.
    2. when I enable smart card authentication on the McAfee console for any HP laptop and try to use my smart card on McAfee Endpoint encryption pre boot screen, machine freezes. Same configuration of McAfee encryption works fine on Dell laptops.
    Help, please.

    Hello

    Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT audience Pro on Microsoft TechNet. Please post your question in the TechNet forum. You can follow the link to your question:

    http://social.technet.Microsoft.com/forums/en-us/w7itprogeneral/threads

    Hope the above information is helpful.

  • 8460p: keep the smart card reader attached, even if the card is removed

    HP EliteBook 8460p

    Win 7 Pro 64-bit

    When a smart card is inserted, you are able to see your smart card reader in Device Manager. When you remove your card chip, the chip card reader disappears in Device Manager. Is it possible to always keep the smart card reader attached?

    According to the BIOS version (F.22) will there is a fix where you can set the power state of the smart card reader:

    '- Fixes an issue where the setup of BIOS (F10) does not display the power of smart card Options once the system is restarted. -Fixes an issue where rebooting the system (reboot) is slow after the modem is turned off in the configuration of the BIOS (F10). »

    But this isn't the case to find.

    Any suggestions?

    Concerning

    F27 BIOS and the new card reader is needed to solve this problem.

    old player = v1.20

    new player = v1.21

    /paasen

  • Generate public and private keys within the smart card

    Hi all

    I use this code to generate public and private keys within the smart card.

    KeyPair kp = new pair of keys (KeyPair.ALG_RSA_CRT, KeyBuilder.LENGTH_RSA_512);
    kp.genKeyPair ();
    PrivateKey prikey = kp.getPrivate ();
    PublicKey pubkey = kp.getPublic ();

    This code runs without error.

    I need to obtain the public key of the smart card. So I need to get the public key to a byte array.
    But I can't get these keys in array of bytes of plain text.

    The methods I can get for pubkey object are

    pubkey.clearKey ();
    pubkey. Equals (obj);
    pubkey.getSize ();
    pubkey.getType ();
    pubkey.isInitialized (); only these.

    I use
    Eclipse Version: 3.4.1 (level of agreement of the compiler = 1.4)
    Jcop plugin (to connect with the real map and to test the java code in virtual card provided by JCOP)
    OmniKey5321 (characters without contact) card reader

    What is the reason to get those above methods pubkey object? Is it a version problem?
    How can I get the public key in ordinary byte array? Is this possible?
    If it is not possible, is there a way to get the public key as a certificate of export or something another solution?

    If my script is not a possible strategy, how can I use private public keys to send the applet-specific data? Is there a better way to do it?

    Published by: 863766 on June 6, 2011 12:16 AM
    RSAPublicKey pubkey = kp.getPublic();
    

    then

    pubkey.getExponent(...); pubkey.getModulus(...);
    
  • I received a notice that my auto renew failed because the credit card could not be processed.  I've updated the information, now how to make certain that my fee was properly paid?

    I received a notice that my auto renew failed because the credit card could not be processed.  I've updated the information, now how to make certain that my fee was properly paid?

    HI nocaldavid,

    If you're referring to your ExportPDF subscription, I can confirm that it has renewed successfully. The next in your account billing date is November 27, 2015, and the account is active.

    You can find a receipt for your payment by following the instructions in this document: manage your membership and your payment. Creative cloud. Look in the section payment & credit card.

    Best,

    Sara

  • View 4.5 and the smart card configuration

    Hi all

    I encountered a problem which I hope one of you can help me with.

    I install a new server connection view, v4.5 on Windows Server 2008 and everything works fine. I can browse to display administrator connect to a virtual computer by using view Client and also with a thin client. So all is well.

    The problem comes when I try to configure smart card authentication. I created a locked.properties like the documentation file, placed in the install_directory\VMware\VMware View\Server\sslgateway\conf\locked.properties has the status of docs, restart the service and now nothing. Cannot browse to the administrator of the display, unable to connect with View Client or thin client. I tried to start and stop ALL services on the machine vMware, restarted the machine and still nothing.

    I deleted the locked.properties file, rebooted the machine, nothing. If I uninstall and reinstall see connection to the server, everything is fine, but as soon as I add in locked.properties, all works again.

    The content of my locked.properties is:

    trustKeyfile = mystore.key

    trustStoretype = JKS

    useCertAuth = true

    The key file, mystore.key, was obtained using the keytool utility and copied in install_directory\VMware\VMware View\Server\sslgateway\conf, as the docs state.

    I'm just ideas on how to solve this problem.

    Sounds like something in your trust store causes a problem when you start the Secure Gateway service.

    When you started your broker with the locked.properties in place, the service "VMware View security component of gateway" stops shortly after startup? There may be an exception in the newspapers of debugging describing such a problem, near a line similar to:

    2010-12-01 14:38:03, INFO 199 generating managers trust for authentication of the client

  • Question about the graphics card of the Satellite P50t-B-108

    Hello

    I think to buy the Toshiba Satellite P50t-B-108 model.
    Can you tell me if this phone has some kind of graphic hibrid (he uses both the graphic processor Embedded Intel and AMD one?) or simply the radeon graphics processor?

    I need to install a linux distribution (I might go with ubuntu, but it's not important) and what I need to know is if the HDMI works...

    Thank you.

    Hello

    As far as I know the Satellite P50t-B-108 was equipped with the graphics card AMD Radeon R9 M265X.
    In addition the Intel® Core i7-4700HQ processor supports the Intel HD Graphics 4600
    This Intel HD 4600 graphics unit is part of the Intel CPU.

  • Question about the graphics card of Satellite P30 144

    Hello
    I have a Satellite P30-144 and I need to know if the graphics card is integrated to the motherboard or is separated.
    I play a lot of games online and you need to know if I need to go out and buy a new one, cause my graphics card does not work on the new moh airborne

    Ty for your help

    Colin

    Hi friend

    Sorry I have to tell you that it s not possible to update your computer with a new graphics from the vga chip is embedded on the motherboard.

    Almost ALL of the toshiba machines were "wired" so graphics card if you don t one machine of 30,000 dollars for weld and a LOT of know-how for reprogramming BIOS as the guys at toshiba @ Japan then take your thoughts on the upgrade of the VGA.

    If I were you I would upgrade my RAM instead or if you really want to play games with your machine then you can order this thing:

    http://tech.Yahoo.com/CES/null/11883

    Welcome them

  • Questions about the video card upgrade

    I have a t HPE-310 (CTO) with an Intel i7 processor and an AMD/ATI HD5450 graphics card.

    http://h10025.www1.HP.com/ewfrf/wc/product?product=4242292&CC=CA&DLC=en&LC=en&JumpID=reg_R1002_USEN _...

    I want to upgrade the graphics card to better manage the Guild Wars 2.

    I am looking to buy an AMD/ATI HD6850 and a CS600 Corsair for power.

    Is this a reasonable combination for my computer? Are there other combinations you would sugget instead?

    Also, there are other problems, I need to be careful?

    SteveW44,

    If you meant the CX600 Corsair, I anticipate no problems. Enjoy!

  • Using labview, how do I access the card chip with the smart card reader?

    Hi all

    I read some of the 2006 post, it helped me some what but I'm still stuck.  I can communicate with the card reader SCR335 until getting the list of card reader.  When I use the winscard.dll to get the status of the card, I get '6' which means nothing to me.  I'm including what I've done so far, but I still need to read the card chip.   I had also used two third-pary active X control but not anywhere either.  One of Priore and SCardX_Easy 1.  Thanks in advance.

    Peter N


  • A question about the network card set

    Hi all

    In the vSphere Client, I can not change the type of a network card. But with PowerCLI, in case of power off the power of virtual machines, I can execute the following line:

    get-vm <virtual_machine_name> | get-networkadapter | set-networkadapter -type "vmxnet3"

    Is it correct method to change adapter type? (I need to keep tha MAC address)

    When you change the type of NETWORK card, Windows treats it as a new device.

    You will have to redo all the IP settings on the map 'new '.

    The easiest way is first get IP parameters, with the Get-VMGuestNetworkInterface cmdlet.

    Then change the type of NETWORK adapter and then redefine the IP parameters with the Set-VMGuestNetworkInterface cmdlet.

  • The Authentucated smart card user session is stopped airtight when the card is removed, regardless of httpd SSLSessionCacheTimeout (default 300) setting. Why?

    I installed safety device in the option tab / advanced ff. Then using smart cards to connect to my server. The smart card user is authenticated and secure connection goes smoothly. When the card is removed from the card reader, the connection is immediately interrupted, regardless the SSLSessionCacheTimeout settings. Mine is set to 300.

    I did the same thing with IE, it maintains the connection until the expiry of the SSLSessionCacheTimeout.

    It is characteristic of FF-specific-designed? Or do I FF browser-specific sth keep my secure connection based on the parameter SSLSessionCacheTimeout?

    Thank you

    Hey SecureDevPaty,

    I wonder if you have installed a cert in the side server or client-side.

    I'm not an expert in the present, but these are the references that I found. I * think * after reading this session http://stackoverflow.com/questions/12.../session-disconnect-the-client-after-smart-card-is-removed LAA there is a feature of ssl in the about: config page. If you are looking for ssl, look at the features of trading. who, after having reread the thread we already did.

    I started to read more about the rules of ssl

    and a few rfcs. My question is, the rule for timeout, is this set on the server? with a specific rule in the cert? If it is a basis of cert, I would ask stackoverflow.com

  • Smart card authentication does not

    I am currently configuring a deployment view in our environment.  Installation requires that we use smart cards to connect (Aladdin eToken Pro).  I have the aladdin software installed on the client computer.  When I run the client to view I don't get invited to my PIN and instead get a message indicating that this smart card is required for the connection.

    Smart card for my domain authentication is working because I need a smart card to connect to our current physical machines.

    Has anyone had an experience getting the aladdin etokens to work?

    Thank you

    Casey Shenberger

    It's really weird.  I don't expect this step to get this part working, but I guess stranger things have occurred.

    In general, the answer to your question is to set the GPO of Agent 'AllowSingleSignOn' to false/stop.  Then the SSO will not be attempted in remote desktop.  If, as you say, you don't want users to have access to the smart card reader in the remote desktop connection or for use with applications, the next step depends on the Protocol.  If the end users use PCoIP, then it seems that you do not want to install the Sub-function "PCoIP Smart Card" of the agent Installer and devices will not be redirected.  If end users use RDP, then use one of the client group policy to turn off the smart card redirection.  In my view, there is also a PCoIP GPO to do the same thing (or he respects the GPO of RDP, offhand, I don't remember that one).

  • Smart card reader does not correctly connect once the virtual machine is restored from sleep using the vmrum controls

    Smart card reader does not correctly connect once the virtual machine is restored from sleep using the vmrum controls

    Scenario is,

    1. smart card reader is connected to the VM with card inserted in

    2 initiate a prompt suspension of the VM toolbar

    3. now to resume the virtual machine by using vmrun command into the host machine

    WS t vmrun start xxx.vmx

    Now, the recovery of VM but the smart card reader that was previously connected does not work properly in VM that is to say, sometimes after CV chip card reader driver is uninstalling and a few other times, chip connected to the drive is not available on a virtual computer

    My requirement is after power, smart card reader can stay connected to the virtual computer with the already installed driver and the smart card.

    Kindly help with this problem.

    Host operating system: Victoire 2012 R2

    The VM OS: win 10 x 64

    Thank you!!

    Dear all,

    I had a work around for this problem. By adding "usb.autoConnect.device0 ="0xVID:0xPID"" this statement to the VMX file, solves this problem, that is, whenever the VM is wake-up by clicking on the link CV or using vmrun commands, it connects the unit in question automatically and it is charging correctly with his driver. Obtaining smart card detected after sleep\hibernate with no problems.

    VID & PID is respective ID of the device that can be seen in the properties of the Device Manager "Device Instance path".

    For more information about this, visit VMware KB: automatic connection of USB devices to the virtual machine power on

    ~ Surendra

  • How to disable the "Insert smart card" dialog box keeps appearing after the connection?

    Running Windows 7 64 bit on a laptop Dell which includes and integrated smart card reader. My configuration does not require a smart card to log on. I was wondering if the smart card reader has worked, I plugged a card chip used on another system. The driver is installed automatically, so it appears the drive works.

    Now, whenever I log in, the "Insert smart card" dialog box is displayed. If I cancel or close the box, he continues to reappear every few seconds. How to disable this behavior?

    Update: this is somehow connected to Outlook 2003. I have 4 different e-mail accounts. The "Insert smart card" box appears only when checking for my att account (yahoo), which is configured by using POP3.

    Go to the Services.msc and check the settings for the smartcard (manual test) service.

    Tom

    PS 29 December 2011

    The position of the OP, have been reported since a lot of this problem on the some notebooks Dell and HP. There are a few reports that a replacement of the motherboard fixed the problem and the other that the relocation of a certain connector (no mention of exaclly one that) solves the problem. Direct contact with the manufacturer of the laptop computer, Dell or HP wether, might be useful. Try a follow-up if you have already made contact.

    Tom

Maybe you are looking for

  • Fusion drive problem

    I have an imac 5 k 27 inches I have a disk fusion drive installed with the purchase. I have some how seperated the reader in an ssd and a normal hard drive. Could list you the steps to get this drive as a disc fusion.

  • When I try to reply to a message on my Yahoo email, nothing happens when I type. This is not the case with safari.

    That's the problem. On my Yahoo email, no letters appear when I try to type a response. This is not the case with Safari.

  • My PC won't start Windows after I used it to work from home

    New software has been installed on my HP Pavilion G6 to allow me to work at home home. Now I stopped the work and my PC cannot start when starting. She's just a black screen and I can't get to Windows. How can I go back to Windows? How do I get this

  • DLL does not not on the deployed computers

    Greetings; I'm working on a VI to run a night vision camera. My PC is win 7 and I'm under LabVIEW 2014. My machine deployment is a tablet of Microsoft Surface on 10 to win. The camera driver software is Pleora 4.0.3.3049, I'm also using some function

  • PSC 2410: after the evil power on

    After turning on the device: -normal startup begins, then start grinding noise (sounds like grinding gear) -hourglass appears -' On' light green binks -device remains in this State and is unusable (note, grinding sound stops after a few minutes)