!coeAONBrWyDJnYMbMi:nixos.org

NixOS System Operations

311 Members
About system administration for running NixOS systems in production. Declaratively manage your operations. | Room recommendations: #networking:nixos.org88 Servers

Load older messages


SenderMessageTime
23 Aug 2024
@vampyr3:matrix.orgJake ThompsonThat just sounds interesting all over. I wish there was more industry support for various ones now that you mention that. Maybe someone can pitch that to one of these VC's out here . 16:58:57
@flare:matrix.darkc0de.oneflareI might actually be dumb. Turns out I was mixing up memory cards and PKI cards as they both use the same interface. So now I have the backwards issues. Lots of potential writers. But very few cards. And albiet quite expensive19:03:57
@flare:matrix.darkc0de.oneflare15 USD for a single one yeesh19:04:10
24 Aug 2024
@shymega:one.ems.host@shymega:one.ems.host changed their display name from Dom Rodriguez (shymega) to [DEPRECATED] Dom 'shymega' Rodriguez.01:58:36
@darkwater4213:matrix.org@darkwater4213:matrix.org left the room.02:21:20
@lychee:wires.cafelychee joined the room.04:25:42
@summit0:matrix.orgsummit0 joined the room.06:06:53
@vampyr3:matrix.orgJake Thompson
In reply to @flare:matrix.darkc0de.one
I might actually be dumb. Turns out I was mixing up memory cards and PKI cards as they both use the same interface.

So now I have the backwards issues. Lots of potential writers. But very few cards. And albiet quite expensive
wow , seeing as those have the same interface , that's definitely a manufacturer concern. I will look more into the ISO's around it , as you would think there would be some standardization around it you know.
13:29:08
@vampyr3:matrix.orgJake Thompson
In reply to @flare:matrix.darkc0de.one
I might actually be dumb. Turns out I was mixing up memory cards and PKI cards as they both use the same interface.

So now I have the backwards issues. Lots of potential writers. But very few cards. And albiet quite expensive

if you don't mind me asking , whats the general case that , people in general use these for , is it like for hardware storage or an encrypted key?

  • just curious.
13:30:51
25 Aug 2024
@lineararray:matrix.orgLinearArray changed their profile picture.05:01:15
@richard_cory:matrix.orgRichard Cory joined the room.09:15:34
@flare:matrix.darkc0de.oneflareits similar to the Yubikey in that it is a hardware cryptographic token. They are most commonly used in Government where its is an ID card with a certificate loaded. Some european countries also use it for national IDs. for the US however its limited to government contractors and military personel16:51:29
@flare:matrix.darkc0de.oneflare
In reply to @vampyr3:matrix.org
wow , seeing as those have the same interface , that's definitely a manufacturer concern. I will look more into the ISO's around it , as you would think there would be some standardization around it you know.

The thing is that ISO 7816 is essentially a full contact smart card specification stack.

For example what I have gathered is that ISO 7816-4 describes the pin interface and a lot of cards are compliant with this standard

16:52:56
@flare:matrix.darkc0de.oneflarehowever 7816-15 describes how the internal data structure of the smartcard is to be laid out and access. I havent read into this specific part too much as to whether specifically defines crypto tokens but either way it describes a file like data structure on smart cards However no smart card has to follow BOTH. Memory cards are Just EEPROMs that connect to the contact interface specified in 7816-4. But dont provide any crypto circuity. So, not useful as a token. 16:56:22
@flare:matrix.darkc0de.oneflareso to have a smart card for crypto purposes you need to have a 7816-4 smart card with 7816-15 OR* pkcs#15 (crypto specific file system spec for smart card tokens). All fine and dandy. apparently its impossible to find those cards that provide full pkcs#15 compliance so that they can be programmed by opensc. You usually find cards that only impliment partially pkcs#15 and the rest of how data is stored is left up to the manufacturer. This is because FIPS 201 and SP 800-73 (US Government standards for ID smart card crypto tokens) Leave the internal data structure of the smart cards up to the manufacturuers 17:01:35
@flare:matrix.darkc0de.oneflareso in conclusion17:01:43
@flare:matrix.darkc0de.oneflareits one hell of a muddled mess. and If you want the exact same solution that is easy and nice to use. Get a yubikey17:02:16
@flare:matrix.darkc0de.oneflareFun fact: You debit or credit card is also a smart card that follows these standards as a crypto token. Just its own decades long mess there17:03:21
@flare:matrix.darkc0de.oneflare* Fun fact: Your debit or credit card is also a smart card that follows these standards as a crypto token. Just its own decades long mess there17:03:29
@flare:matrix.darkc0de.oneflare* Fun fact: Your debit or credit card is also a smart card if it has a chip and that follows these standards as a crypto token. Just its own decades long mess there17:03:59
@flare:matrix.darkc0de.oneflare* its one hell of a muddled mess. and If you want the exact same solution that is easy and nice to use. *Get a yubikey instead*17:04:32
@flare:matrix.darkc0de.oneflare* its one hell of a muddled mess. and If you want the exact same solution that is easy and nice to use. **Get a yubikey instead**17:04:44
@flare:matrix.darkc0de.oneflareFor me in the US I had a hell of a time finding a card that is fully compliant with these open standards and avoids vendor lock in. However for those in Europe there is hope https://webservices.aventra.fi/webshop/index.php?route=product/category&path=60 Here you can get iso 7816 form factor smart cards that are fully compliant with open standard pkcs#15. Which means there is no need for proprietary software managed on windows. a beautiful thing. Just for each card for me postage would make one card cost me $70. So not so great for me. Possible good for yall in europe17:09:06
@flare:matrix.darkc0de.oneflare* For me in the US I had a hell of a time finding a card that is fully compliant with these open standards and avoids vendor lock in. However for those in Europe there is hope https://webservices.aventra.fi/webshop/index.php?route=product/category&path=60 Here you can get iso 7816 form factor smart cards that are fully compliant with open standard pkcs#15. Which means there is no need for proprietary software managed on windows. a beautiful thing. Just for me postage would make one card cost me $70. So not so great for me. Possibly good for y'all in europe17:09:49
@superflyjohnson1:matrix.orgSuperfly Johnson joined the room.19:54:20
@mindstorms6:matrix.orgmindstorms6 joined the room.20:30:51
26 Aug 2024
@von.dev:matrix.orgvon.dev joined the room.16:31:19
@ruther:ditigal.xyzRuther joined the room.19:05:16
27 Aug 2024
@jappie3:matrix.orgjappie3 joined the room.08:45:25
@oliver.falvai:oliverfalvai.xyzoliver.falvai joined the room.10:52:18

Show newer messages


Back to Room ListRoom Version: 10