OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Muscle] Secure PIN entry with variable legth

From: Karsten Ohme (widerstandt-online.de)
Date: Mon Jan 28 2008 - 17:05:22 CST


Mathias Tausig schrieb:
>> AFAIK it is not possible to NOT padd a PIN using the PIN entry command
>> of a class2 reader. The CCID specification does not specify a no
>> padding option.
>>
>> My CCID driver has support of this feature with the SPR532 reader
>> using a proprietary command of the reader. The patch [1] was applied
>> two years ago and its use is not really documented (even in the source
>> code). If I am correct you just need to send an Class 1 APDU (CLA,
>> INS, P1, P2) and the reader will insert the PIN without padding.
>>
>> If you are not using the SPR532 reader I have no solution.
>>
>
> Sadly, no. It's an Omnikey Cardman 3621.
> Thank you anyway, the knowledge that I can stop trying, helps a bit, too...

See the CT BCS standard. You can sent a command to the terminal, which
builds for you the e.g ISO VERIFY command when the user has press the OK
button. If your reader supports it, then it might look like this:

VERIFY Terminal Length
20180100 08
Tag Length control byte insertion position of PIN ISO VERIFY
52 06 00 06 00200000

Or the PC/SC 2.0 spec defines also some commands if I remember correctly.

Regards,
Karsten
>
> cheers
> Mathias
>
> _______________________________________________
> Muscle mailing list
> Musclelists.musclecard.com
> http://lists.drizzle.com/mailman/listinfo/muscle

_______________________________________________
Muscle mailing list
Musclelists.musclecard.com
http://lists.drizzle.com/mailman/listinfo/muscle