1 Contents
2 Overview
OpenFIPS201 (and PIV in general) places a number of minimum requirements on any smart-card it is installed and used on. If the applet fails to load, it is most likely because the smartcard fails to meet one or more criteria.
The requirements are:
Java Card - Your JCRE/JCVM must be Java Card
3.0.4or aboveGlobal Platform - Version
2.2.1or higher is required, with:Support for Secure Channel Protocol 03 (
SCP03)Support for org.globalplatform.CVM
Randomness - Support for the
ALG_SECURE_RANDOMrandom generator typeMemory - The base applet takes approximately 19kb of EEPROM and 468 bytes or RAM, but this various by installed platform.
2.1 Cryptographic Mechanisms
OpenFIPS201 attempts to be as flexible as possible, when the applet is installed it will attempt to make use of all of the following cryptographic primitives. Any that are not available will simply mean that corresponding mechanisms are not available.
PIV Mechanisms | Javacard Primitive |
|---|---|
08, 0A, 0C | Cipher.ALG_AES_BLOCK_128_ECB_NOPAD |
00,03 | Cipher.ALG_DES_ECB_NOPAD |
06,07 | Cipher.ALG_RSA_NOPAD |
11, 14, 27, 2E | KeyAgreement.ALG_EC_SVDP_DH_PLAIN |
11, 14, 27, 2E | MessageDigest.ALG_SHA_256 |
11, 14, 27, 2E | MessageDigest.ALG_SHA_384 |
11, 14 | Signature.ALG_ECDSA_SHA |
11, 14 | Signature.ALG_ECDSA_SHA_256 |
11, 14 | Signature.ALG_ECDSA_SHA_384 |
11, 14 | Signature.ALG_ECDSA_SHA_512 |
2.2 Tested Platforms
The following platforms have been tested to work with the OpenFIPS201 applet.
Hardware Platform | Model(s) | Compatibility Notes |
|---|---|---|
NXP JCOP 3 SecID P60 CS (OSB) | J3H082[nnnn] J3H145[nnnn] | All mechanisms supported |
NXP P71 JCOP 4 | P71D321 | All mechanisms supported |
NXP P71 JCOP 4.5 | P71D600 | All mechanisms supported This product was tested using SO28 carrier pre-release engineering samples from Feb 2022, not the final product. |
G&D SmartCafe 7.0 | SCE 7.0 | TODO: Not tested since v1.2 |
Infineon Secora Id | ??? | Tested externally, need confirmation about support and specific model numbers tested. |
0 Comments