CardContact Systems GmbH

OK, now I understand your point: By "non SELECT(AID) commands" I mean all APDUs that are not SELECT APDUs with INS other than A4, like GET DATA or other proprietary...

One could write a small script that basically implements the P12 import from the importp12-plugin located in the keymanager/plugin directory of the Smart Card Shell installation. Arguments could be passed...

There is currently no mechanism to query CKA_SC_HSM_KEY_USE_COUNTER. CKA_SC_HSM_KEY_USE_COUNTER can only be used to set the key use counter in C_GenerateKey() or C_GenerateKeyPair(). Unfortunately that code had a bug when...

No, you can't change the key use counter. It's initial value is set during key creation and decremented with each crypto operation performed with that key. If the use counter...

Currently the only way to generate a key with a key use counter is by using a Smart Card Shell script: var SmartCardHSM = require('scsh/sc-hsm/SmartCardHSM').SmartCardHSM; var SmartCardHSMKeySpecGenerator = require("scsh/sc-hsm/SmartCardHSM").SmartCardHSMKeySpecGenerator; var...

Yes, you can find that information in chapter 5.5.2 of the SmartCard-HSM User Manual. It is basically DO '90' in C-Data of the GENERATE ASYMMETRIC KEY PAIR / GENERATE SYMMETRIC...

Reading the API specs for KeyStoreSpi.engineGetCertificateChain(), I'm not sure if returning a partial chain is the correct behaviour. Anyway, you probably only need to replace the throw statement with a...

Dear @mouse07410, can you share some command lines that show how you used opensc-java with jarsigner ?

Tried that myself and it worked after copying the .so files into jre/lib/ext. Unfortunately there doesn't seem to be a way to set java.library.path for keytool or jarsigner. What I've...

Not sure if this is a good idea, as OAEP parameter are usually defined by CK_RSA_PKCS_OAEP_PARAMS. How was 0x13 assigned to CKM_RSA_PKCS_OAEP_SHA1 ?