Smart Cards basic security issues -
i have basic ambiguities related smart cards, hope can answer these questions:
does smart cards have key encription or authentication purposes (not speaking of pin), inserted in during personalization phase ? if has, 1 key purposes (authentication, encription) or there more of them (assuming single application card) ? in order authentication (between card , terminal) fulfilled how terminal learns cards encription key (i understood authentication take place both parties should have same key). red part 3 , 4 of iso7816, didn't find details regarding matter.
thanks
disclaimer: tale working experience since didn't receive proper training course, wording seems weird
let's java card tiny computer little bit of processing power , memory have os (e.g. java card vm) installed on them
you need have correct key install application (applet) on them (should come along sdk card manufacturer)
it may have usable applet installed, example memory storage (you can put data, data) if applet store secured data, may need write 1 yourself. , authentication on application layer, of course not mention in iso7816-4.
does smart cards have key ...
it on os level , need 1 tamper applet inside (intstall/delete), more on application level , may differ lot applet vendor
... how terminal learns cards encription key ...
either have symmetrical key hard-coded before hand (in terminal code , in applet code) once both come in contact first time, generate new key , replace blah blah blah
or can put different generated key along applet file when install applet (at least gemalto can) use pinpad or other mean input key on terminal well
Comments
Post a Comment