[Question] Need documentation on smartcard standard #122
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
I read the code of pico-hsm and compared with ISO7816-4, I found some INS are not defined, I searched the source code of OpenSC, it seems pico-hsm tries to implement the smartcard-hsm, but I cannot found any document on this specific HSM, I found some info here, it says a smartcard-hsm is needed to access these documents, so I want to ask:
Is these documents free?
Can I use a pico-hsm to get these documents?
Is these documents protected by NDA or any other similar licenses? Can you share?
I don't have access to any official SmartCard-HSM documentation or NDA-protected materials, so I can't share or comment on them.
Pico HSM is based on reverse engineering and practical experimentation (APDUs, OpenSC behavior, ISO7816-4), not on proprietary specifications, so some INS values or behaviors may be incomplete and full compatibility isn't claimed.
Pico HSM is not signed or endorsed by CardContact and has no commercial relationship with them, so it can only rely on publicly available content and observable implementations.
Okay, so I got this:
Can we mimic YubiHSM? Its PC side software is open-source.
Yes, this is something I considered. However, it’s completely new protocol, with non-standardized interface and only compatible with their apps. It’s not even based on ISO 7816. Probably I’d could not reuse more than the 10% of Pico HSM and I believe the adoption would be residual. Unless someone fund it, by now this has low priority.
Besides this, I don’t think it has any advantate wrt ScHsm. Is some feature you are willing to see in Pico HSM?
I have not used pico-hsm or yubihsm by now, just being curious. No specific HSM features are needed. PIV/PGP/FIDO already satisfy all my needs.
Yeah, I found yubihsm is using a different protocol. It seems a little complicated, with their own Secure Messaging design.
I ask this question just because their python code for PC management seems to only have little code. I would like to use a mature, well-maintained, nice&clean PC software to talk to my own HSM. So, I came to the idea of reusing their python host software.