Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
Re: [Muscle] smartcard operating system replacement
From: Matthias Bruestle (mlistmbsks.franken.de)
Date: Thu Aug 14 2003 - 15:37:48 CDT
On Thu, Aug 07, 2003 at 10:38:33AM -0700, musclesudog.com wrote:
> So SOSSE looks like a terrific project. It mentions that a "programmer"
> is required for using SOSSE with the supported smartcards. Here's my
> understanding: a programmer of an atmel card can be as simple as a tiny
> little circuit attached to a regular serial port, but is capable of
> different things entirely than a normal smartcard reader like that
> available from Towitoko.
That is correct.
> My next question (assuming you've read this far heh heh) is whether an
> external, serial-based ChipDrive is capable of acting as a programmer
> for the atmel-based smartcards like the Funcard? My first instinct is
> to say "no".
It is not possible. You need special control of the two lower, in
normal smart cards unused contacts, which the Towitoko or any other
normal IFD does not provide.
> So, then, where to find a programmer?
Either at the shops, where you can buy the Funcards or build one yourself.
It is just an interface for RS-232 to the SPI interface used on Atmel
> My problem is that after reading this Slashdot article here:
> ... I'm quite reluctant to order programmers from the U.S. or abroad,
> especially from a domain-name called "sathelp2000," because I'd hate to
> have to deal with some weird satellite company's litigiousness just for
> ordering simple equipment to begin a hobby smartcard lab. :)
I hat so far no problems and I have also not heard of any problems in
Germany. If it is to risky for you, you can also build yourself one.
> So I guess I'll end this tome, and see what folks have to say about the
Ok ... what you should know about the Funcard platform:
1) These are not secure controlers, but COTS controlers with nearly
no security. (They do have internal lock bits for internal code and
data, but the protection is nearly as good as what you can get from
2) The Funcard has not big integer unit. So it can't do any RSA.
So, what is SOSSE good for if there is not good platform? Learning
and experimenting. SOSSE has been used for e.g.:
1) Analyzing DPA
2) Platform for implementing AES in a university lab course
Muscle mailing list