Re: C_GenerateKeyPair failure with ACS CryptoMate (T2), ...shouldwork.html#0x072F0xB106
Godfrey Chung <[email protected]> Thu, 20 Apr 2017 09:46:02 +0800
| Newsgroups | gmane.comp.lib.muscle |
|---|---|
| Message-ID | <CAF8LfwKXK2y=AwZLK+n1LQ4k2C8qm=SRJwn8x=xejtnqidkvjg@mail.gmail.com> |
Hi Carsten To fix the problem, you need to get ACOS5-Cyptomate Client Kit v4.5 and reinitialize CryptoMate T2 using the ACS CMU tool and middleware. Regards Godfrey On Sat, Apr 15, 2017 at 10:34 PM, Ludovic Rousseau <[email protected]> wrote: > > > 2017-04-15 10:55 GMT+02:00 Carsten Blüggel <[email protected]>: >> >> Hello, >> >> C_GenerateKeyPair on hardware ACS CryptoMate (T2), >> >> idVendor: 0x072F >> idProduct: 0xB106 >> >> always fails with bit size > 3328 (... 4096), it succeeds <= 3328. >> As comparison, C_GenerateKeyPair on predecessor hardware >> https://pcsclite.alioth.debian.org/ccid/shouldwork.html#0x072F0x90DB takes >> about 3-4 minutes for 4096 bit key pair to complete (with same ccid-git, >> invoked through scriptor) and #0x072F0xB106 seems to be slower, >> thus my assumption, it may be something time-related (or a bug in card >> operating system?). >> >> Occasionally #0x072F0xB106 also shows some other strange behavior like >> starting the Linux-User-Logout-countdown (Kubuntu 16.04 xenial) after >> plugging out/removing the USB token. >> And once, after a failed C_GenerateKeyPair, card contents were erased. >> >> My trial to change 'TIME_BEFORE_SUICIDE' from 60 to 300 and manually >> installing 1.4.26 libpcsclite and pcscd ended in screwing my system, then >> back with 1.8.14, omitting --auto-exit from pcscd start params didn't change >> the failure issue. >> I hope, the following information is complete and a solution is close? >> Thanks in advance, Regards > > > From log1_failed_0x072F0xB106_CryptoMate_T2: > After a lot of time and many "Time extension request" sent by the "card" the > reader reports: > 00000023 commands.c:1523:CCID_Receive Card absent or mute > > It is a problem within the token itself. > I can't fix the problem. > > Bye > > -- > Dr. Ludovic Rousseau > > _______________________________________________ > Pcsclite-muscle mailing list > [email protected] > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pcsclite-muscle _______________________________________________ Pcsclite-muscle mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pcsclite-muscle