Re: Feitian U2F NFC + CCID (FT U2F CCID)

Ian Hill <[email protected]> Sun, 07 Jan 2018 22:19:50 +0000
Newsgroups gmane.comp.encryption.opensc.devel
Message-ID <CANH67Ui39wE8zxdytwXUO1kCoZ-f++N+X2a5iys4-nxtxz2D7g@mail.gmail.com>
Thanks, I know that, however with this usb key you can also enable smart
card mode (CCID) as well using the Feitian application, which I have done.
Similar to the Yubikey 4 and Neo.

The output file I attached previously shows that the usb is a valid CCID
smart card and Ludovic of libccid has this usb on his 'should work's list.
The only issue seems to be that there is not a Opensc driver, perhaps based
on an update to the Feitian ePass2003 usb smart card.

Note this is totally separate to U2F mode, which I can actually disable if
required.

On Sun, 7 Jan 2018, 10:11 pm Bernd Eckenfels, <[email protected]>
wrote:

> You cannot store certificates or keys on a U2F only device, it only
> supports the U2F features for key derivation.
>
> Gruss
> Bernd
> --
> http://bernd.eckenfels.net
> ------------------------------
> *From:* Ian Hill <[email protected]>
> *Sent:* Sunday, January 7, 2018 10:27:39 PM
> *To:* Frank Morgner
> *Cc:* Bernd Eckenfels; [email protected]
> *Subject:* Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID)
>
>
> Thanks, this usb supports both U2F and CCID,  the U2F works as expected,
> however, having enabled the CCID mode although it is recognised as a CCID
> card under libccid there is no suitable driver in Opensc.
>
> If anyone can help with the driver I can test it this end.
>
> On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <[email protected]> wrote:
>
>> U2F is yet an other token standard. So, by design, it is not to be used
>> with the APIs that OpenSC is offering. However, that should not be a
>> problem, because U2F capable applications should have native support for
>> your token without the need of OpenSC.
>>
>>
>> In theory we could add low level support for U2F and even some PKCS#11
>> wrapping for U2F into OpenSC. But currently there are no applications that
>> have use for this.
>>
>> 2018-01-06 22:20 GMT+01:00 Ian Hill <[email protected]>:
>>
>>> Yep, it's the U2F version and that works fine, however, I would like to
>>> add gpg keys to it and have enabled U2F & CCID mode.
>>>
>>> It is now recognised by libccid using the latest stable version but not
>>> recognised by Opensc.
>>>
>>> I assume if I can get Opensc working I should be able to add either gpg
>>> or RSA keys to the smart card.
>>>
>>> On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <[email protected]>
>>> wrote:
>>>
>>>> Sounds like Fido Universal Two Factor. Chrome should be able to use
>>>> that as a login token. (There is for example a Yubikey U2F Token which
>>>> works great with Chrome)
>>>>
>>>> Gruss
>>>> Bernd
>>>> --
>>>> http://bernd.eckenfels.net
>>>> ------------------------------
>>>> *From:* Ian Hill <[email protected]>
>>>> *Sent:* Saturday, January 6, 2018 6:57:03 PM
>>>> *To:* [email protected]
>>>> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID)
>>>>
>>>> Hi
>>>>
>>>> I have the following card which I have managed to find with libccid,
>>>> however, it is not supported by OpenSC.
>>>>
>>>> $ opensc-tool --atr
>>>> Using reader with a card: FT U2F CCID [CCID] 00 00
>>>> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2
>>>>
>>>>
>>>> Is there a driver in the works, or can I help with any information?
>>>>
>>>>
>>>> Ian
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> _______________________________________________
>>> Opensc-devel mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>>>
>>>
>>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Opensc-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Opensc-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensc-devel