NixOS System Operations | 584 Members | |
| About system administration for running NixOS systems in production. Declaratively manage your operations. | Room recommendations: #networking:nixos.org | 160 Servers |
| Sender | Message | Time |
|---|---|---|
| 25 Aug 2024 | ||
In reply to @vampyr3:matrix.org The thing is that ISO 7816 is essentially a full contact smart card specification stack. For example what I have gathered is that ISO 7816-4 describes the pin interface and a lot of cards are compliant with this standard | 16:52:56 | |
| however 7816-15 describes how the internal data structure of the smartcard is to be laid out and access. I havent read into this specific part too much as to whether specifically defines crypto tokens but either way it describes a file like data structure on smart cards However no smart card has to follow BOTH. Memory cards are Just EEPROMs that connect to the contact interface specified in 7816-4. But dont provide any crypto circuity. So, not useful as a token. | 16:56:22 | |
| so to have a smart card for crypto purposes you need to have a 7816-4 smart card with 7816-15 OR* pkcs#15 (crypto specific file system spec for smart card tokens). All fine and dandy. apparently its impossible to find those cards that provide full pkcs#15 compliance so that they can be programmed by opensc. You usually find cards that only impliment partially pkcs#15 and the rest of how data is stored is left up to the manufacturer. This is because FIPS 201 and SP 800-73 (US Government standards for ID smart card crypto tokens) Leave the internal data structure of the smart cards up to the manufacturuers | 17:01:35 | |
| so in conclusion | 17:01:43 | |
| its one hell of a muddled mess. and If you want the exact same solution that is easy and nice to use. Get a yubikey | 17:02:16 | |
| Fun fact: You debit or credit card is also a smart card that follows these standards as a crypto token. Just its own decades long mess there | 17:03:21 | |
| * Fun fact: Your debit or credit card is also a smart card that follows these standards as a crypto token. Just its own decades long mess there | 17:03:29 | |
| * Fun fact: Your debit or credit card is also a smart card if it has a chip and that follows these standards as a crypto token. Just its own decades long mess there | 17:03:59 | |
| * its one hell of a muddled mess. and If you want the exact same solution that is easy and nice to use. *Get a yubikey instead* | 17:04:32 | |
| * its one hell of a muddled mess. and If you want the exact same solution that is easy and nice to use. **Get a yubikey instead** | 17:04:44 | |
| For me in the US I had a hell of a time finding a card that is fully compliant with these open standards and avoids vendor lock in. However for those in Europe there is hope https://webservices.aventra.fi/webshop/index.php?route=product/category&path=60 Here you can get iso 7816 form factor smart cards that are fully compliant with open standard pkcs#15. Which means there is no need for proprietary software managed on windows. a beautiful thing. Just for each card for me postage would make one card cost me $70. So not so great for me. Possible good for yall in europe | 17:09:06 | |
| * For me in the US I had a hell of a time finding a card that is fully compliant with these open standards and avoids vendor lock in. However for those in Europe there is hope https://webservices.aventra.fi/webshop/index.php?route=product/category&path=60 Here you can get iso 7816 form factor smart cards that are fully compliant with open standard pkcs#15. Which means there is no need for proprietary software managed on windows. a beautiful thing. Just for me postage would make one card cost me $70. So not so great for me. Possibly good for y'all in europe | 17:09:49 | |
| 19:54:20 | ||
| 20:30:51 | ||
| 26 Aug 2024 | ||
| 16:31:19 | ||
| 19:05:16 | ||
| 27 Aug 2024 | ||
| 08:45:25 | ||
| 10:52:18 | ||
| 15:03:34 | ||
| 21:56:18 | ||
| 28 Aug 2024 | ||
| 03:31:43 | ||
| 29 Aug 2024 | ||
| 12:21:22 | ||
| 12:21:37 | ||
| 30 Aug 2024 | ||
| 15:55:58 | ||
| 20:28:40 | ||
| 31 Aug 2024 | ||
| 07:43:39 | ||
| 08:27:00 | ||
| 08:48:14 | ||
| 14:38:55 | ||
| 17:07:42 | ||