OpenCrypto: Unchaining the JavaCard Ecosystem
dan.enigmabridge.com
OpenCrypto: Unchaining the JavaCard Ecosystem
1–10 of 13 posts
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#2I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards?
Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#3I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
Yes I'm curious too.
I believe the "Secure Element" in iOS and other smartphone payment systems with the EMV wireless payment standard, all use this as their OS/ecosystem, as it's mandated by the payment industry. So it is widely used.
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#4I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
Yes I'm curious too. I believe the "Secure Element" in iOS and other smartphone payment systems with the EMV wireless payment standard, all use this as their OS/ecosystem, as it's mandated by the payment industry. So it is widely used.
If you trust your smartphone then you don't necessarily need smartcards. But if you want to run own applications in a trusted environment then JavaCards are really nice. You can also use them as a portable trusted "computer", wallet, ...
In terms of use, there's an additional complexity for using JavaCards. We try to solve that a) making the code easier to port and b) providing access to smartcards via TCP/IP where it makes sense to have them in a rack.
In general, they don't run out of battery and you can print your headshot and name on them.
In terms of "hardware" - all chip debit/credit cards use the same processors (actually they are a complete computers with EEPROM, RAM, co-processors).
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#5I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
https://blog.saush.com/2006/09/08/getting-information-from-a...
Almost all payment chip cards (except in France) uses a worldwide standard called EMV
A quick check with the smart card list maintained by Ludovic Rousseau shows that the card I used (UOB Platinum Visa Card) is likely to an IBM JCOP (JavaCard Open Platform) 30 chip card.
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#6I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
The secure enclave in Intel chips uses a variant of JavaCard.
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#7I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
If I recall correctly, the JavaCard standard is what's used in most PGP/GnuPG hardware tokens, e.g. Yubikeys, Nitrokeys, etc., none of which currently support EC crypto due to the limitations cited in the OP. So movement on this front could make for a real advancement in hardware crypto token functionality.
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#8I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
The secure enclave in Intel chips uses a variant of JavaCard.
Citation, please?
The SGX enclave is totally unrelated to JavaCard.
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#9I don't know very much about this field - what are the major uses of JavaCard other than in SIM cards? Or are SIM cards where this OpenCrypto would be most useful for makers/researchers?
Smart Cards used for military/corporate computer authentication and facility access, some transit systems, some purpose-specific stored value cards (like bike locker rental at BART stations), then of course chip credit/debit cards.
Anywhere you want the user's credential to have some intelligence (sign challenges under specific circumstances, credit and debit a balance without any central database in the loop, etc) but be highly resistant to data tampering/exfiltration (like inflating the balance or copying the key) by its bearer.
Re: OpenCrypto: Unchaining the JavaCard Ecosystem
#10Earlier quoted context omitted.
The secure enclave in Intel chips uses a variant of JavaCard.
Citation, please? The SGX enclave is totally unrelated to JavaCard.
https://libreboot.org/faq.html#intel
"Another module is the Dynamic Application Loader (DAL), which consists of a Java virtual machine and set of preinstalled Java classes for cryptography, secure storage, etc."
Or the remark from Joanna Rutkowska,
https://twitter.com/rootkovska/status/728150127458684931
> @AviKivity ME's "Dynamically Loaded Applications", Java-based :)