maemo.org - Talk - Complete Filesystem Encryption

maemo.org - Talk (https://talk.maemo.org/index.php)

- Brainstorm (https://talk.maemo.org/forumdisplay.php?f=47)

- - Complete Filesystem Encryption (https://talk.maemo.org/showthread.php?t=70539)

Re: Complete Filesystem Encryption

Quote:

Originally Posted by metawishmaster (Post 1093788)

This may be not be what you need, but it can deal with smart cards:
http://talk.maemo.org/showthread.php?t=77443

CCID compliant RFID readers are rare. Most of them are closed sourced, and offer drivers for i386 and X64 architectures.

Which smart card reader did you use?

Re: Complete Filesystem Encryption

I have a "ruToken ECP", but all card from http://www.opensc-project.org/opensc...portedHardware should work as well. But it necessary to edit /usr/lib/cryptmenu/format-card.rules suitably for your card

Re: Complete Filesystem Encryption

Quote:

Originally Posted by metawishmaster (Post 1093839)

I have a "ruToken ECP", but all card from http://www.opensc-project.org/opensc...portedHardware should work as well.

Now I get it, it is a contact based ccid compliant SAM reader.

Quote:

Originally Posted by metawishmaster (Post 1093839)

But it necessary to edit /usr/lib/cryptmenu/format-card.rules suitably for your card

You mean to make it aware of my card's ATR.

Re: Complete Filesystem Encryption

Quote:

Originally Posted by momcilo (Post 1093852)

Now I get it, it is a contact based ccid compliant SAM reader.

I don't know then... :(

Quote:

Originally Posted by momcilo (Post 1093852)

You mean to make it aware of my card's ATR.

well, an example from opensc-project.org, how to format ruToken ECP cards:
sh$ pkcs15-init --erase-card
sh$ pkcs15-init --create-pkcs15 --so-pin "12345678" --so-puk ""
sh$ pkcs15-init --store-pin --label "User PIN" --auth-id 02 --pin "12345678" --puk "" --so-pin "12345678" --finalize

as you can see ther is no ATR in these commands.. But it could be a card-specific

Re: Complete Filesystem Encryption

Quote:

Originally Posted by metawishmaster (Post 1093861)

I don't know then... :(

It has a SIM-sized smart card inserted. That sort of configuration is usually called SAM (Security Access Module).
Depending on your SAM module, you may be able to remove the "SIM" card from the reader and insert other, but some SAM modules are sealed.

Quote:

Originally Posted by metawishmaster (Post 1093861)

well, an example from opensc-project.org, how to format ruToken ECP cards:
sh$ pkcs15-init --erase-card
sh$ pkcs15-init --create-pkcs15 --so-pin "12345678" --so-puk ""
sh$ pkcs15-init --store-pin --label "User PIN" --auth-id 02 --pin "12345678" --puk "" --so-pin "12345678" --finalize
as you can see ther is no ATR in these commands.. But it could be a card-specific

It is usual for smart card middle-ware too determine the card type based on ATR it receives once it connects to the smart card. Other approaches include selecting applet AID.

There is a class of products from companies like G&D, Gemalto..., which provides microSD + smart card in the same package. That would allow you not to carry the usb SAM.

Nokia did support that for some symbian devices (e.g. n97).

Personally I would prefer completely separate contact less smart card. That's why I was interested, since I though you reader is contactless.