Re: Feitian U2F NFC + CCID (FT U2F CCID)
Ian Hill <[email protected]> Sun, 07 Jan 2018 22:19:50 +0000
| Newsgroups | gmane.comp.encryption.opensc.devel |
|---|---|
| Message-ID | <CANH67Ui39wE8zxdytwXUO1kCoZ-f++N+X2a5iys4-nxtxz2D7g@mail.gmail.com> |
Thanks, I know that, however with this usb key you can also enable smart card mode (CCID) as well using the Feitian application, which I have done. Similar to the Yubikey 4 and Neo. The output file I attached previously shows that the usb is a valid CCID smart card and Ludovic of libccid has this usb on his 'should work's list. The only issue seems to be that there is not a Opensc driver, perhaps based on an update to the Feitian ePass2003 usb smart card. Note this is totally separate to U2F mode, which I can actually disable if required. On Sun, 7 Jan 2018, 10:11 pm Bernd Eckenfels, <[email protected]> wrote: > You cannot store certificates or keys on a U2F only device, it only > supports the U2F features for key derivation. > > Gruss > Bernd > -- > http://bernd.eckenfels.net > ------------------------------ > *From:* Ian Hill <[email protected]> > *Sent:* Sunday, January 7, 2018 10:27:39 PM > *To:* Frank Morgner > *Cc:* Bernd Eckenfels; [email protected] > *Subject:* Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) > > > Thanks, this usb supports both U2F and CCID, the U2F works as expected, > however, having enabled the CCID mode although it is recognised as a CCID > card under libccid there is no suitable driver in Opensc. > > If anyone can help with the driver I can test it this end. > > On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <[email protected]> wrote: > >> U2F is yet an other token standard. So, by design, it is not to be used >> with the APIs that OpenSC is offering. However, that should not be a >> problem, because U2F capable applications should have native support for >> your token without the need of OpenSC. >> >> >> In theory we could add low level support for U2F and even some PKCS#11 >> wrapping for U2F into OpenSC. But currently there are no applications that >> have use for this. >> >> 2018-01-06 22:20 GMT+01:00 Ian Hill <[email protected]>: >> >>> Yep, it's the U2F version and that works fine, however, I would like to >>> add gpg keys to it and have enabled U2F & CCID mode. >>> >>> It is now recognised by libccid using the latest stable version but not >>> recognised by Opensc. >>> >>> I assume if I can get Opensc working I should be able to add either gpg >>> or RSA keys to the smart card. >>> >>> On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <[email protected]> >>> wrote: >>> >>>> Sounds like Fido Universal Two Factor. Chrome should be able to use >>>> that as a login token. (There is for example a Yubikey U2F Token which >>>> works great with Chrome) >>>> >>>> Gruss >>>> Bernd >>>> -- >>>> http://bernd.eckenfels.net >>>> ------------------------------ >>>> *From:* Ian Hill <[email protected]> >>>> *Sent:* Saturday, January 6, 2018 6:57:03 PM >>>> *To:* [email protected] >>>> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) >>>> >>>> Hi >>>> >>>> I have the following card which I have managed to find with libccid, >>>> however, it is not supported by OpenSC. >>>> >>>> $ opensc-tool --atr >>>> Using reader with a card: FT U2F CCID [CCID] 00 00 >>>> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 >>>> >>>> >>>> Is there a driver in the works, or can I help with any information? >>>> >>>> >>>> Ian >>>> >>>> >>>> >>>> >>>> >>> >>> ------------------------------------------------------------------------------ >>> Check out the vibrant tech community on one of the world's most >>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>> _______________________________________________ >>> Opensc-devel mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/opensc-devel >>> >>> >> > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Opensc-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/opensc-devel > ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Opensc-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/opensc-devel