CardContact Systems GmbH

So you want the user to authenticate towards a trusted server, that in turn authenticates against the card ? Then you need some challenge response protocol between the card and...

I agree with the smart card jungle, but that is also the reason we should be careful not to interfere with other applications in the same system. And IMHO sending...

> Sorry to hear that, as the original driver in 2012 was form CardContact: "Copyright (C) 2012 Andreas Schwier, CardContact, Minden, Germany, and others" and "Andreas Schwier" has provided patches...

> I tested this using a "Card Contact - SmartCard-HSM" token you had provided many years ago. Having such a device has helped debug issues over the years. A newer...

> But it does respond to ISO-7816 commands. May be it could use some extra hardening code to reject any commands it does not understand while not losing the SM...

[opensc-firefox.log](https://github.com/OpenSC/OpenSC/files/14965897/opensc-firefox.log) Looks to me, as if after the sc_connect_card: returning with: -1210 (Card is invalid or cannot be handled) the unknown card is disconnected and then the loop starts over...

OpenSC is installed without p11-kit. This is vanilla Debian testing. @frankmorgner Using exclusive access has a lot of other issues, as one can see with the exclusive locking used by...

Limiting to SELECT(AID) for probing cards that are not identified by the ATR does solve the problem for JavaCards. The SELECT(AID) is handled by the JCVM and does not reach...

> Sending 00 A4 04 0C ... is not a select AID command, just a select file command. The card OS would most likely pass this to the currently active...

>> Ahhh, no. P1=04 means Select by DF Name, which means SELECT(AID) >Disagree. IOS 7816-4 says: "A multi-application card shall support the SELECT command with P1='04', P2='00' and..." The point...