Smart Cards basic security issues -


i have basic ambiguities related smart cards, hope can answer these questions:

does smart cards have key encription or authentication purposes (not speaking of pin), inserted in during personalization phase ? if has, 1 key purposes (authentication, encription) or there more of them (assuming single application card) ? in order authentication (between card , terminal) fulfilled how terminal learns cards encription key (i understood authentication take place both parties should have same key). red part 3 , 4 of iso7816, didn't find details regarding matter.

thanks

disclaimer: tale working experience since didn't receive proper training course, wording seems weird

let's java card tiny computer little bit of processing power , memory have os (e.g. java card vm) installed on them

you need have correct key install application (applet) on them (should come along sdk card manufacturer)

it may have usable applet installed, example memory storage (you can put data, data) if applet store secured data, may need write 1 yourself. , authentication on application layer, of course not mention in iso7816-4.


does smart cards have key ...

it on os level , need 1 tamper applet inside (intstall/delete), more on application level , may differ lot applet vendor

... how terminal learns cards encription key ...

either have symmetrical key hard-coded before hand (in terminal code , in applet code) once both come in contact first time, generate new key , replace blah blah blah

or can put different generated key along applet file when install applet (at least gemalto can) use pinpad or other mean input key on terminal well


Comments

Popular posts from this blog

Sort a complex associative array in PHP -

vb.net - How to ignore if a cell is empty nothing -

recursion - Can every recursive algorithm be improved with dynamic programming? -