http://blog.gmane.org/gmane.comp.encryption.opensc.announce hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/33 <pre>OpenSC 0.12.1 ============= OpenSC 0.12.1 was released on 17.05.2011. Packages with source and binaries can be downloaded from http://www.opensc-project.org/files/opensc - Source for Unix: opensc-0.12.1.tar.gz SHA1: 656524f2aef61cfeea60b7795ef5a942bcca6f30 - Installer for OSX 10.6: OpenSC-0.12.1-10.6.dmg SHA1: e1b4dc13c9aba07b8c9dfc4dac1b83b9765d02ac - Installer for OSX 10.5: OpenSC-0.12.1-10.5.dmg SHA1: 203237a7bc251bb528810cceca0cbf416034b52c - Installer for x86 Windows: OpenSC-0.12.1-win32.msi SHA1: 4dd85a7c5cf74a4c0bea7f8dc6e7c1012eed1b24 - Installer for x64 Windows: OpenSC-0.12.1-win64.msi SHA1: 10847c4fe4380d6f11e25d5e5d4491a7a39f34fe - Most Important News - - Binary MSI installers for Windows x86 and x64 are now available. - MiniDriver is included in the build but not enabled. People interested in testing it with their cards are encouraged to consult the wiki and ask for guidance on opensc-devel mailing list. - New card driver: - IAS-ECC 1.0.1 - Support for cards with multiple PKCS#15 applications == OpenSC overview == OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS#11 API so applications supporting this API (such as Mozilla Firefox and Thunderbird) can use it. On the card OpenSC implements the PKCS#15 standard and aims to be compatible with every software/card that does so, too. - Features - - Support for generation, import and use of RSA keys up to 2048 bits. - Preliminary support for ECDSA and GOST - Supports SHA-1, SHA-2, MD5 and RIPEMD160 hashing - Multi-platform PKCS#11 v2.20 module for Linux, Windows and Mac OS X. - Works with supported cards in native Mac OS X applications (Safari, Mail.app etc) - Through open source OpenSC.tokend - Support for all recent smart card readers, by default via PC/SC. - Optionally through CT-API or OpenCT. - Multi-platform support for modern pinpad readers with PC/SC v2 compatible drivers - Works with open source pcsc-lite and CCID driver NB! Actual features depend on used hardware and software versions! == More information == Known issues will be gathered to the OpenSC wiki (with additional technical details) as they are discovered. http://www.opensc-project.org/opensc Full list of all changes and fixed issues is available online: http://www.opensc-project.org/opensc/log/?action=follow_copy&amp;mode=follow_copy&amp;rev=5451&amp;stop_rev=4981&amp;limit=999 http://www.opensc-project.org/opensc/query?status=closed&amp;group=resolution&amp;milestone=0.12.1 == Next release == OpenSC 0.12.2 will be released on 10.06.2011. To learn more about the next release and to learn how to get involved in OpenSC development, go to OpenSC wiki: http://www.opensc-project.org/opensc/wiki/GetInvolved http://www.opensc-project.org/opensc/milestone/0.12.2 Thanks to all contributors! Regards, Martin Paljak, OpenSC release worker </pre> Martin Paljak 2011-05-19T08:13:32 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/32 <pre>OpenSC 0.12.0 ============= OpenSC 0.12.0 was released on 23.12.2010. Packages with source and binaries can be downloaded from http://www.opensc-project.org/files/opensc - Source for Linux: opensc-0.12.0.tar.gz SHA1: 1400da0732a4cbf9ff7f8296bf59c6e153207247 - Installer for OSX 10.6: OpenSC-0.12.0-10.6.dmg SHA1: dc3122c09d59f94216ff2b9365775f32d53e2749 - Installer for OSX 10.5: OpenSC-0.12.0-10.5.dmg SHA1: 373dcee2de7c63a61116d4d677a0e667e6c4a7d2 - Installer for Windows: OpenSC-0.12.0.win32.exe SHA1: 9f2b7f9af3962307acf9baac79f89fa7b76c8c51 - Most Important News - - Binary installers for Windows (x86) and Mac OS X (10.5+) now available. - Windows installer will probably see changes in the next release, use with caution. - Support for several new cards added - Portugese eID - Italian eID, CNS - Westcos - CardOS version 4.4 - Transparent software key generation has been removed from OpenSC - Linking against libopensc has been deprecated - This release fixes CVE-2010-4523, a security issue where specially crafted rogue smart cards can be used to execute arbitrary code. - OpenSC Features - - Support for generation, import and use of RSA keys up to 2048 bits. - Partial GOST algorithms support with OpenSSL 1.0.0 and later - Supports SHA1, SHA-256, SHA-512, MD5 and RIPEMD160 hashing - Multi-platform PKCS#11 v2.20 module for Linux, Windows and Mac OS X. - Works with supported cards in native Mac OS X applications (Safari, Mail.app etc) - Through open source OpenSC.tokend - Support for all recent smart card readers, by default via PC/SC. - Optionally through CT-API or OpenCT. - Multi-platform support for modern pinpad readers with PC/SC v2 compatible drivers - Works with open source pcsc-lite and CCID driver NB! Actual features depend on used hardware and software versions! - Notes to packagers - - Linking against libopensc is not encouraged; OpenSC no longer installs header files. - Developer packages (-dev/-devel) should be removed. Developers are encouraged to use either PKCS#11 for cryptographic purposes or pcsc-lite for direct smart card access. - Only a single reader layer can be enabled at compile time. The default is PC/SC. Packagers and distros are encouraged to compile with pcsc-lite support by default. See OpenSC ticket #216 for more information: http://www.opensc-project.org/opensc/ticket/216 - mozilla-opensc plugin has been discontinued. This removes libassuan dependency. - Please report issues to opensc-devel&lt; at &gt;opensc-project.org Known issues will be gathered to the OpenSC wiki (with additional technical details) as they are discovered. http://www.opensc-project.org/opensc Thanks to all contributors! </pre> Martin Paljak 2010-12-27T18:52:13 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/31 <pre>New versions of OpenSC and OpenCT are released today, with improvements for Rutoken S driver mostly. New in OpenCT 0.6.20; 2010-02-16; Andreas Jellinghaus * Modify Rutoken S binary interfaces by Aktiv Co. * Makefiles fixed in doc/ directory http://www.opensc-project.org/files/openct/openct-0.6.20.tar.gz New in OpenSC 0.11.13; 2010-02-16; Andreas Jellinghaus * Modify Rutoken S binary interfaces by Aktiv Co. * Muscle driver fixed (acl reading issue) * Many small fixes (e.g. mem leaks) * Compiling with openssl 1.0.0-beta fixed http://www.opensc-project.org/files/opensc/opensc-0.11.13.tar.gz Please note that OpenSC is currently under developing for a new 0.12.* release line. Thus only a few selected changes have been backported into the OpenSC 0.11.13 maintenance release. The majority of changes in the last few months is only available in the svn trunk development repository until a new 0.12.* release is available. Please give these new releases a try. If you encounter any problem with the new versions, please let us know. Thanks! Regards, Andreas </pre> Andreas Jellinghaus 2010-02-16T10:34:56 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/30 <pre>OpenCT 0.6.19 was released with these changes: * update on udev rules. Please now use udev instead of hal, as distributions are deprecating hal in favor for udev. * Thanks to Daniel Kahn Gillmor for testing on debian. http://www.opensc-project.org/files/openct/openct-0.6.19.tar.gz Engine_PKCS#11 0.1.8 was released with these changes: * Fix problem causing slot_n parsing returning not certs or keys by Camille Moncelier * Fix missing declaration of set_init_args symbol by Arfrever Frehtes Taifersar Arahesis http://www.opensc-project.org/files/engine_pkcs11/engine_pkcs11-0.1.8.tar.gz To help ubuntu and debian with moving from hal setup to udev setup and to fix known problems/bugs I created some experimental debian packages. These are awailable at http://www.opensc-project.org/debian/ Note: I compiled them on ubuntu and only looked at the result, but didn't find time for real testing so far. So please beware. Please test them (maybe recompile them yourself if they don't work out of the box or you need 32bit packages), and let me know if they work for you. Regards, Andreas </pre> Andreas Jellinghaus 2010-01-07T11:23:08 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/29 <pre>OpenSC 0.11.12 Release Announcement =================================== On 2009-12-18 OpenSC 0.11.12 was released, providing compatibility with an ASN.1 Integer encoding issue in older OpenSC releases. The problem ----------- OpenSC 0.11.4 and earlier did not encode integers properly in ASN.1 structures including the on-card format for directory files. This issue was was fixed in OpenSC 0.11.5. However in december 2009 it was discovered, that as a result some cards initialized with OpenSC 0.11.4 and earlier will not properly work with OpenSC 0.11.5 and later. So far texting showed only problems with "Starcos" cards. The integers keyReference and pinReference are read as negative numbers, instead of the positive number (value+256) they should represent. PKCS#15 dictates that both values need to be positive Integers if specified in the directory files on the card. Thus code can automatically detect the wrong (negative) values and fix the issue by adding 256. In OpenSC 0.11.12 such code was implmeneted and successfully tested. Starcos cards initialized with OpenSC 0.11.4 and earlier can now be used with OpenSC 0.11.12 and later. Cards initialized with OpenSC 0.11.5 and later continue to work fine. Changes to the code were implemented to keep the ABI compatible with earlier versions, so that applications using the internal OpenSC API such as OpenSSH do not need to be recompiled. Still the format on the Starcos cards initialited with OpenSC 0.11.4 continues to be wrong. If necessary a tool can be written to convert such old cards, please report to the OpenSC mailing lists. Creating or storing additional private keys and PIN objects will also update the directory files and thus should writte the correct ASN.1 values on the cards. Please note however that feedback on testing cards was limited, thus it can't be ruled out that other cards are affected by this issue too. Please contact us using one of the OpenSC mailing list or out email address bugs&lt; at &gt;opensc-project.org if you find the same issue with further cards. Other changes ------------- The Entersafe driver in OpenSC was enhanced so it does now support private data objects. OpenSC 0.11.12 is available at http://www.opensc-project.org/files/opensc/opensc-0.11.12.tar.gz Regards, Andreas Jellinghaus </pre> Andreas Jellinghaus 2009-12-18T14:28:02 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/28 <pre>OpenSC 0.11.11 released today updated the "myeid" driver and fixes compiling issues with OpenSSL 0.9.7 and 1.0.0. http://www.opensc-project.org/files/opensc/opensc-0.11.11.tar.gz Development is now focused on a new 0.12.* branch of OpenSC. Regards, Andreas </pre> Andreas Jellinghaus 2009-10-26T20:06:22 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/27 <pre>Libp11 0.2.7 released today fixes a small bug: If C_Initialize returns CKR_CRYPTOKI_ALREADY_INITIALIZED, that is ok and is not ignored. That way applications like wpa_supplicant can unload and reload pkcs11 modules without issues. http://www.opensc-project.org/files/libp11/libp11-0.2.7.tar.gz Engine_pkcs11 0.1.7 released today fixes a small bug with pin handling (overwriting too many bytes before freeing the memory). http://www.opensc-project.org/files/engine_pkcs11/engine_pkcs11-0.1.7.tar.gz OpenSC 0.11.10 released today now includes a new driver "westcos" and a new driver "myeid" for Aventras MyEid cards (currently only cards initialized with their software are supported). Also GOST algorithm support was added for Rutoken cards and a few small bugs were fixed. http://www.opensc-project.org/files/opensc/opensc-0.11.10.tar.gz Unless we find a major issues with the opensc release, this might be the last 0.11.* release, as we are already working on the new 0.12 branch with many improvements and code cleanups (but also with some ABI and API changes). If you find any issue with these releases, please let us know using our bug tracker (wiki registration required), mailing lists opensc-devel or opensc-user (mailing list subscription required) or simply contact bugs&lt; at &gt;opensc-project.org. Thanks. Andreas </pre> Andreas Jellinghaus 2009-10-20T13:01:58 http://permalink.gmane.org/gmane.comp.encryption.opensc.announce/26 <pre>A new version of OpenCT has been released: 0.6.18. You can download the source code from here: http://www.opensc-project.org/files/openct/openct-0.6.18.tar.gz Changes: New in 0.6.18; 2009-09-25; Andreas Jellinghaus * USB code for BSD fixed by Emmanuel Dreyfus * Add support for Rutoken S by Aktiv Co. / Aleksey Samsonov Plus some fixes to Info.plist (for users combining openct with pcsc-lite). Regards, Andreas </pre> Andreas Jellinghaus 2009-09-25T08:14:46 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.comp.encryption.opensc.announce