I just released a new version of pcsc-lite 1.8.6.
Changes:
pcsc-lite-1.8.6: Ludovic Rousseau
30 August 2012
I sometimes get comments on articles of my blog. I can classify them in 3 different categories:
" Anyone having issues with reading encrypted messages via a CAC within Mountain Lion and Outlook?This comment is not about the article itself and is not a spam.
I can sign and encrypt, and people can read them, but I cannot decrypt. It is not the card or reader, it works fine on the PC.
It is very strange because if an encrypted email comes in, I briefly can read it in the window pane, but if I revisit the message or double click to open, I get an error and the message is lost forever. Everything worked fine under Lion, only appeared after ML upgrade. "
Please, do only post comments related to the article above.
For general questions, subscribe to and use the muscle mailing list.
Your comment may be moderated and will not appear until then. No need to repost the same comment.
PC/SC v2 part 10 standard "Part 10 IFDs with Secure PIN Entry Capabilities" offers a way to get some information from a smart card driver.
I already blogged about this service in
SCardControl(FEATURE_GET_TLV_PROPERTIES, ...) require some code to parse the result TLV buffer.PCSCv2Part10_find_TLV_property_by_tag_from_buffer() "low" levelPCSCv2Part10_find_TLV_property_by_tag_from_hcard() "high" levelPCSCv2Part10_find_TLV_property_by_tag_from_hcard() uses a SCARDHANDLE hCard and PCSCv2Part10_find_TLV_property_by_tag_from_buffer() uses a buffer already retrieved using SCardControl(FEATURE_GET_TLV_PROPERTIES, ...)/* sample.c: example of use of libPCSCv2part10 helper functions Copyright (C) 2012 Ludovic Rousseau This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA */ /* * $Id: sample.c 6416 2012-08-08 09:49:00Z rousseau $ */ #include <stdio.h> #ifdef __APPLE__ #include <PCSC/winscard.h> #include <PCSC/wintypes.h> #else #include <winscard.h> #endif #include <reader.h> #include "PCSCv2part10.h" /* PCSC error */ #define PCSC_ERROR_EXIT(rv) \ if (rv != SCARD_S_SUCCESS) \ { \ printf("Failed at line %d with %s (0x%lX)\n", __LINE__, pcsc_stringify_error(rv), rv); \ goto end; \ } int main(void) { LONG rv; SCARDCONTEXT hContext; SCARDHANDLE hCard; int value, ret = -1; DWORD dwReaders, dwPref; char *mszReaders; rv = SCardEstablishContext(SCARD_SCOPE_SYSTEM, NULL, NULL, &hContext); PCSC_ERROR_EXIT(rv) dwReaders = SCARD_AUTOALLOCATE; rv = SCardListReaders(hContext, NULL, (LPSTR)&mszReaders, &dwReaders); PCSC_ERROR_EXIT(rv) /* use first reader */ printf("Using reaer: %s\n", mszReaders); rv = SCardConnect(hContext, mszReaders, SCARD_SHARE_SHARED, SCARD_PROTOCOL_T0 | SCARD_PROTOCOL_T1, &hCard, &dwPref); /* the interesting part is here */ ret = PCSCv2Part10_find_TLV_property_by_tag_from_hcard(hCard, PCSCv2_PART10_PROPERTY_wIdVendor, &value); printf("ret: %d\n", ret); printf("value for PCSCv2_PART10_PROPERTY_wIdVendor: 0x%04X\n", value), rv = SCardDisconnect(hCard, SCARD_LEAVE_CARD); PCSC_ERROR_EXIT(rv) rv = SCardFreeMemory(hContext, mszReaders); PCSC_ERROR_EXIT(rv) rv = SCardReleaseContext(hContext); PCSC_ERROR_EXIT(rv) end: return ret; }
PCSCv2part10.c and PCSCv2part10.h) into the project FooBar.I just released a new version of pcsc-lite 1.8.5.
Changes:
pcsc-lite-1.8.5: Ludovic Rousseau
4 August 2012
SCardBeginTransaction(): fix a bug introduced in version 1.8.4 related to sharingThe new version of Mac OS X 10.8 called Mountain Lion is now available since July 25th 2012.
 |
| Mac OS X Mountain Lion |
$ diff -ru SmartCardServices-55000 SmartCardServices-55105|diffstat Info-PCSC.plist | 2 Makefile-exec.installPhase |only Makefile.installPhase | 3 SmartCardServices.xcodeproj/project.pbxproj | 939 +++++----------------------- config |only 5 files changed, 194 insertions(+), 750 deletions(-)
I just released a new version of pcsc-lite 1.8.4.
Changes:
pcsc-lite-1.8.4: Ludovic Rousseau
26 June 2012
[ and ] in the list of accepted characters for a reader nameSCardEstablishContext() in each threadI just released a version 1.4.7 of libccid.
1.4.7 - 22 June 2012, Ludovic Rousseau
I discovered 2 other tools for interacting with EMV smart cards
| EMV function name | Command |
| Initialize card | SELECT FILE "1PAY.SYS.DDF01" |
| READ RECORD (to read all records in the specified SFI) | |
| Application Selection | SELECT |
| Initiate Application Processing | GET PROCESSING OPTIONS |
| Read Application Data | READ RECORD (all records listed in the AFL) |
| (Read other application data) | GET DATA (ATC, Last online ATC, PIN Try Counter, Log Format) |
| Dynamic Data Authentication | INTERNAL AUTHENTICATE |
| Offline verification | VERIFY (only plaintext PIN verification is supported) |
| Read Transaction Log | GET DATA/READ RECORD |
| N/A | READ RECORD (brute force all valid SFI values and record numbers) |
| EMV tag search | Look up EMV tags in this handy database. Search by keyword e.g. for all tags that contain the word "currency" or "cryptogram" in the description, or look up a hex tag e.g "9F20". |
| TLV decoder | Decode EMV TLV (Tag, Length Value) byte strings into their constituent tags and sub-tags. Useful for analysing APDU traces, responses and so on. |
| CAP calculator | Generate CAP codes using an emulated banking card and CAP calculator, to test against real gadgets or for testing authentication servers. |
| Cryptogram calculator | Generate and verify EMV ARQC, ARPC and TC cryptograms, calculated using the vital parameters of the card, UDKs, ATC etc. |
| DES calculator | Encrypt and decrypt hex strings using DES and 3DES, using the basic modes of operation, ECB, CBC. |
| ASN1 decoder | Decode a binary file into an ASN1 dump using an online interface to Peter Gutmann's dumpasn1 tool |
| PIN translation tools | Encrypt, decrypt and translate ISO PINblocks between different encryption keys. PINs, PANs, padding... all sorts of fun! |
| Keyshare generation tools | Automatically generate test keys of various lengths, and split into components. KCVs are automatically provided for each component and the whole key. |
| Truecolour hex dump tool | This hex dump tool will create a multicoloured, annotated hex dump of the provided file, making it easy to spot strings, markers, and high and low entropy areas of the file. Very useful for when you don't have your favourite hex dump tool to hand. |
| Character set encoding conversion | Convert strings of text and hex between ASCII, ECBDIC and hex representations. Suprising how often you need one of these! |
| ePassport MRZ calculator | Generate passport Machine Readable Zones (MRZs) from biographical details including name, date of birth, and passport numbers, expiry dates etc. Randomly created identities can also be used. |
| Contact us | Let us know what you think of the site, and if you have any problem reports or suggestions. |
I just released a (two in fact) new version of pcsc-tools. The major change is the move of the personal litst of ATR used by ATR_analysis from ~ to ~/.cache/.
If you do not know what pcsc-tools is, it contains 4 tools:
pcsc_scan(1) regularly scans every PC/SC reader connected to the host if a card is inserted or removed a "line" is printed.ATR_analysis(1) is a Perl script used to parse the smart card ATR. This script is called (by default) by pcsc_scan.scriptor(1) is a Perl script to send commands to a smart card using a batch file or stdin.gscriptor(1) the same idea as scriptor.pl(1) but with a Perl-Gtk2 GUI.smartcard_list.txt file is now searched in ~/.cache/ by default64-bits Intel and AMD CPUs are able to run 32 and 64 bits programs at the same time. Different OS uses different strategies to use this feature.
file command line tool to check what is inside a binary.$ file /bin/ls /bin/ls: Mach-O universal binary with 2 architectures /bin/ls (for architecture x86_64): Mach-O 64-bit executable x86_64 /bin/ls (for architecture i386): Mach-O executable i386The
ls command is available in both 32 and 64-bits.$ cd /System/Library/Frameworks/PCSC.framework $ file PCSC PCSC: Mach-O universal binary with 2 architectures PCSC (for architecture x86_64): Mach-O 64-bit dynamically linked shared library x86_64 PCSC (for architecture i386): Mach-O dynamically linked shared library i386The PCSC framework is available for both 32-bits applications (i386) and 64-bits applications (x86_64).
System32 directory to store system files. The surprise is that on a 64-bits machine the System32 is used to store 64-bits system files and the 32-bits system files are stored in a SysWow64 directory. I am not a Windows expert (or even user). I got the information from friends and it is confirmed here.System32 for 32-bits files and System64 for 64-bits files. Never underestimate Microsoft on its ability to find a complex solution to a given problem.SCardListReadersA() and SCardListReadersW()./usr/lib32/ to store 32-bits libraries and /usr/lib64/ to store 64-bits libraries. This scheme is know as multi lib or biarch./usr/lib/<triplet>/. The <triplet> being something like i386-linux-gnu or x86_64-linux-gnu or mipsel-linux-gnu./usr/lib/i386-linux-gnu/libpcsclite.so.1
/usr/lib/i386-linux-gnu/libpcsclite.so.1.0.0
/usr/share/doc/libpcsclite1/changelog.Debian.gz
/usr/share/doc/libpcsclite1/changelog.gz
/usr/share/doc/libpcsclite1/copyright/usr/lib/x86_64-linux-gnu/libpcsclite.so.1
/usr/lib/x86_64-linux-gnu/libpcsclite.so.1.0.0
/usr/share/doc/libpcsclite1/changelog.Debian.gz
/usr/share/doc/libpcsclite1/changelog.gz
/usr/share/doc/libpcsclite1/copyrightlibpcsclite.so.1 and the server is pcscd.pcsc-lite-1.4.99: Ludovic Rousseau 9 January 2008 - add support of mix 32/64 bits platforms. Thanks to Jacob Berkman for the big patch
pcscd and one (or more) libpcsclite.so.1.pcsc_scan command.$ file /usr/bin/pcsc_scan /usr/bin/pcsc_scan: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.26, BuildID[sha1]=0x50bda59b9b9a86b312e59fd3022cd4da87b87265, strippedThe file is a 64-bits binary.
$ ldd /usr/bin/pcsc_scan linux-vdso.so.1 => (0x00007fff7c75f000) libpcsclite.so.1 => /usr/lib/x86_64-linux-gnu/libpcsclite.so.1 (0x00007f022ca9d000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f022c716000) librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f022c50d000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f022c2f1000) /lib64/ld-linux-x86-64.so.2 (0x00007f022ccb1000)And it is linked with the 64-bits library at
/usr/lib/x86_64-linux-gnu/libpcsclite.so.1.$ pcsc_scan PC/SC device scanner V 1.4.18 (c) 2001-2011, Ludovic Rousseau Compiled with PC/SC lite version: 1.7.4 Using reader plug'n play mechanism Scanning present readers... Waiting for the first reader...^C
/usr/bin/pcsc_scan but different content). So I unpack the Debian package in a temporary directory.$ mkdir foobar $ cd foobar $ dpkg -x ../pcsc-tools_1.4.18-1_i386.deb . $ file usr/bin/pcsc_scan usr/bin/pcsc_scan: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.26, BuildID[sha1]=0xcbf386965c3541f0557c913c5aead05512d4b75c, stripped
$ usr/bin/pcsc_scan PC/SC device scanner V 1.4.18 (c) 2001-2011, Ludovic Rousseau Compiled with PC/SC lite version: 1.8.1 Using reader plug'n play mechanism Scanning present readers... Waiting for the first reader...^C