Skip to content
NdK edited this page Jun 4, 2013 · 16 revisions

Rethinking OpenPGP card. At the moment we just started collecting ideas and preparing repositories.

Resulting code is licensed under GPL.

Main goals:

  • OpenPGP v2.0 compatible card based on JavaCard platform
    • FIXME: list of supported functions

In addition to OpenPGP v2.0 compatible card:

  • Support for key export according to user-defined policy. Have to be defined before generating keys, eventually only towards user-certified devices (other smart card).
  • Support for storage of expired encryption keys (~ 30 keys, possible limitation by card memory). Making the card act like a (secret) keyring (number of keys constrained only by available card resources)
  • Command chaining and (multiple) secure channels. Single application that uses card doesn't lock the card for EVERY other running application.
  • Different authentication keys for contact and contactless interfaces (optional)
  • Support for longer keys (RSA up to 4096bits, ECC p-521) if supported by HW
  • Support for import of long keys (more than can be fit into single APDU, e.g., RSA > 1024bits) for cards without support for extended APDU
Clone this wiki locally