| 1 |
USB CCID IFD Handler
|
| 2 |
====================
|
| 3 |
|
| 4 |
This package provides the source code for a generic USB CCID
|
| 5 |
(Chip/Smart Card Interface Devices) driver. See [1] for the USB CCID
|
| 6 |
specifications from the USB working group.
|
| 7 |
|
| 8 |
|
| 9 |
Authors:
|
| 10 |
========
|
| 11 |
|
| 12 |
- Ludovic Rousseau <ludovic.rousseau@free.fr>
|
| 13 |
- Carlos Prados for the PPS and ATR parsing code (taken from his
|
| 14 |
towitoto driver) in towitoko/ directory.
|
| 15 |
- Olaf Kirch for the T=1 TPDU code (from the OpenCT package) in openct/
|
| 16 |
directory. I (Ludovic Rousseau) greatly improved this code.
|
| 17 |
|
| 18 |
|
| 19 |
Supported CCID readers:
|
| 20 |
=======================
|
| 21 |
|
| 22 |
(in alphabetical order)
|
| 23 |
- ActivCard USB reader 3.0
|
| 24 |
- Advanced Card Systems ACR 38U-CCID [16]
|
| 25 |
old versions of this reader have a bug: the reader do timeout when a
|
| 26 |
special USB frame is sent from the reader. If the frame size if a
|
| 27 |
multiple of wMaxPacketSize the communication is stopped.
|
| 28 |
- Alcor Micro AU9520 [46]
|
| 29 |
Firmware 1.01 is bogus. The time request sent by the card is not
|
| 30 |
forwarded by the reader to the host.
|
| 31 |
- Athena ASE IIIe USB V2 [29]
|
| 32 |
- Athena ASE IIIe KB USB [42]
|
| 33 |
- Blutronics Bludrive II CCID
|
| 34 |
- C3PO LTC31 (new model, USB product id 0x0006) [8]
|
| 35 |
- Cherry XX33 keyboard [?]
|
| 36 |
- Cherry XX44 keyboard (SmartBoard G83-6744) [18]
|
| 37 |
- Cherry SmartTerminal ST2000U [35]
|
| 38 |
- Cherry ST-1044U [27]
|
| 39 |
- Dell keyboard SK-3106 [?]
|
| 40 |
- Dell smart card reader keyboard [?]
|
| 41 |
- Eutron Digipass 860 [59]
|
| 42 |
- Eutron SIM Pocket Combo [25]
|
| 43 |
- Eutron CryptoIdentity [26]
|
| 44 |
- Eutron Smart Pocket [58]
|
| 45 |
- Gemplus GemPC 433 SL [2]
|
| 46 |
- Gemplus GemPC Card [41]
|
| 47 |
- Gemplus GemPC Key [3]
|
| 48 |
- Gemplus GemPC PinPad
|
| 49 |
- Gemplus GemPC Twin [4]
|
| 50 |
- Gemplus GemCore POS Pro
|
| 51 |
- Gemplus GemCore SIM Pro
|
| 52 |
- Kobil KAAN Base [19]
|
| 53 |
- Kobil KAAN Advanced [20]
|
| 54 |
- Kobil KAAN SIM III [21]
|
| 55 |
- OmniKey CardMan 3121 [5]
|
| 56 |
- RSA SecureID SID800 [50]
|
| 57 |
- SCM Micro SCR 331 [6]
|
| 58 |
You shall upgrade the firmware [17] using version 5.18 or later.
|
| 59 |
- SCM Micro SCR 331-DI [11]
|
| 60 |
You shall upgrade the firmware [17] using version 6.22 or later.
|
| 61 |
- SCM Micro SCR 335 [7]
|
| 62 |
The firmware of this reader can't be upgraded so be sure to buy a
|
| 63 |
recent model with firmware 5.14 or later
|
| 64 |
- SCM Micro SCR 355
|
| 65 |
- SCM Micro SCR 3310 [30]
|
| 66 |
- SCM Micro SCR 3311 [31]
|
| 67 |
- SCM Micro SPR 532 [9]
|
| 68 |
You shall contact Torsten Maykranz <tmaykranz@scmmicro.de> to get a
|
| 69 |
firmware upgrade.
|
| 70 |
- SmartEpad (v 2.0) [32]
|
| 71 |
The firmware gives a very strange description of the reader (like a
|
| 72 |
dwDefaultClock: 1024.000 MHz). So do not expect a perfect behavior.
|
| 73 |
- Verisign Secure Storage Token [24]
|
| 74 |
- Verisign Secure Token [?]
|
| 75 |
- Xiring Teo [52]
|
| 76 |
|
| 77 |
|
| 78 |
Should work but untested by me:
|
| 79 |
===============================
|
| 80 |
|
| 81 |
I would like to get these readers to perform test and validation and
|
| 82 |
move them in the supported list above. If you are one of the
|
| 83 |
manufacturers, please, contact me.
|
| 84 |
|
| 85 |
- Axalto Reflex USB v3 [38]
|
| 86 |
- C3PO LTC32 [13]
|
| 87 |
- C3PO TLTC2USB
|
| 88 |
- C3PO KBR36
|
| 89 |
- Charismathics token
|
| 90 |
- Gemplus GemPC Express
|
| 91 |
- Gemplus Gem e-Seal Pro
|
| 92 |
- Fujitsu Siemens Computers SmartCard USB 2A [53]
|
| 93 |
- Fujitsu Siemens Computers SmartCard Keyboard USB 2A [54]
|
| 94 |
- Giesecke & Devrient StarSign Card Token 350 (ICCD) [57]
|
| 95 |
- Giesecke & Devrient StarSign Card Token 550 (ICCD)
|
| 96 |
- HP USB Smart Card Keyboard [44]
|
| 97 |
- HP USB Smartcard Reader
|
| 98 |
- id3 Semiconductors CL1356D [45] (tested by me but I don't have the
|
| 99 |
reader anymore)
|
| 100 |
- id3 Semiconductors CL1356T [48] (it should be the same firmware as the
|
| 101 |
CL1356D)
|
| 102 |
- Kobil EMV CAP - SecOVID Reader III
|
| 103 |
- Lenovo Integrated Smart Card Reader
|
| 104 |
- Lexar/Gemalto Smart Enterprise Guardian [60]
|
| 105 |
- OmniKey CardMan 1021
|
| 106 |
- OmniKey CardMan 3021 [49]
|
| 107 |
- OmniKey CardMan 3621 [43]
|
| 108 |
- OmniKey CardMan 3821 [37]
|
| 109 |
- OmniKey CardMan 4321 [55]
|
| 110 |
- OmniKey CardMan 5121 [33]
|
| 111 |
- OmniKey CardMan 5125 [51]
|
| 112 |
- OmniKey CardMan 5321 [56]
|
| 113 |
- OmniKey CardMan 6121 [36]
|
| 114 |
- O2Micro Oz776 (0x7762 and 0x7772 versions)
|
| 115 |
- Philips JCOP41V221
|
| 116 |
- SafeNet IKey4000
|
| 117 |
- SCM Micro SCR 331-DI NTTCom [23]
|
| 118 |
- SCM Micro SCR 3310-NTTCOM [28]
|
| 119 |
- SCM Micro SCR 3320 [32]
|
| 120 |
- SCM Micro SCR 333 [15]
|
| 121 |
- SCM Micro SDI 010 [39]
|
| 122 |
- SCM SCR 3340 ExpressCard54 [34]
|
| 123 |
- SchlumbergerSema Cyberflex Access e-gate ICCD
|
| 124 |
- Silitek SK-3105 keyboard [12] or C3PO TLTC2USB [14]
|
| 125 |
- Sitecom USB simcard reader MD-010
|
| 126 |
- Winbond Electronics (for OEM only) [40]
|
| 127 |
|
| 128 |
|
| 129 |
Unsupported or partly supported CCID readers:
|
| 130 |
=============================================
|
| 131 |
|
| 132 |
- ActivCard USB reader 2.0 [10]
|
| 133 |
The reader do timeout when a special USB frame is sent from the
|
| 134 |
reader. If the frame size if a multiple of wMaxPacketSize the
|
| 135 |
communication is stopped.
|
| 136 |
- C3PO LTC31 (old model, USB product id 0x0003) [8]
|
| 137 |
The reader works fine with Linux kernel 2.4 but does not with Linux
|
| 138 |
kernel 2.6. The ioctl() syscall returns EINVAL (Invalid argument)
|
| 139 |
- iDream (THRC2002-2) [47]
|
| 140 |
PPS fails with a Cryptoflex card
|
| 141 |
powerup fails with a Setcos card
|
| 142 |
does work with the belgium eID (the reader is sold for this
|
| 143 |
application)
|
| 144 |
- Kobil mIDentity [22]
|
| 145 |
Time requests are not managed correctly and make the firmware fails.
|
| 146 |
This is not a problem unless you use a time-consuming APDU like RSA
|
| 147 |
key generation.
|
| 148 |
A new firmware will correct the bug.
|
| 149 |
- Reiner-SCT cyberJack pinpad(a)
|
| 150 |
Time requests are not managed and the driver may time out without
|
| 151 |
any response from the reader. This is not a problem unless you use
|
| 152 |
a time-consuming APDU like RSA key generation.
|
| 153 |
|
| 154 |
|
| 155 |
Supported operating systems:
|
| 156 |
============================
|
| 157 |
|
| 158 |
- GNU/Linux (libusb 0.1.7)
|
| 159 |
- MacOS X/Darwin (libusb 0.1.8beta, CVS snapshot. See "Known problems")
|
| 160 |
to libusb)
|
| 161 |
|
| 162 |
|
| 163 |
Debug informations:
|
| 164 |
===================
|
| 165 |
|
| 166 |
The driver uses the debug function provided by pcscd. So if pcscd sends
|
| 167 |
its debug to stderr (pcscd --foreground) then the CCID will also send
|
| 168 |
its debug to stderr. If pcscd sends its debug to syslog (by default)
|
| 169 |
then the CCID will also send its debug to syslog.
|
| 170 |
|
| 171 |
You can change the debug level using the Info.plist configuration file.
|
| 172 |
The Info.plist is installed, by default, in
|
| 173 |
/usr/local/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist
|
| 174 |
|
| 175 |
The debug level is set in the ifdLogLevel field. It is a binary OR
|
| 176 |
combinaison of 4 different levels.
|
| 177 |
- 1: critical: important error messages
|
| 178 |
- 2: info: informative messages like what reader was detected
|
| 179 |
- 4: comm: a dump of all the bytes exchanged between the host and the
|
| 180 |
reader
|
| 181 |
- 8: periodic: periodic info when pcscd test if a card is present (every
|
| 182 |
1/10 of a second)
|
| 183 |
|
| 184 |
By default the debug level is set to 3 (1 + 2) and correspond to the
|
| 185 |
critical and info levels.
|
| 186 |
|
| 187 |
You have to restart the driver so it read the configuration file again
|
| 188 |
and use the new debug level value. To restart the driver you just need
|
| 189 |
to unplug all your CCID readers so the the driver is unloaded and then
|
| 190 |
replug your readers. You can also restart pcscd.
|
| 191 |
|
| 192 |
|
| 193 |
Known problems:
|
| 194 |
===============
|
| 195 |
|
| 196 |
MacOSX libusb
|
| 197 |
"""""""""""""
|
| 198 |
There is a bug in libusb that crash the libusb library when you
|
| 199 |
unplug a reader and replug it in another USB socket. So if you
|
| 200 |
unplug a reader replug it in the same USB socket.
|
| 201 |
|
| 202 |
see http://sourceforge.net/tracker/index.php?func=detail&aid=886778&group_id=1674&atid=101674
|
| 203 |
|
| 204 |
|
| 205 |
Licence:
|
| 206 |
========
|
| 207 |
|
| 208 |
This library is free software; you can redistribute it and/or modify it
|
| 209 |
under the terms of the GNU Lesser General Public License as published by
|
| 210 |
the Free Software Foundation; either version 2.1 of the License, or (at
|
| 211 |
your option) any later version.
|
| 212 |
|
| 213 |
This library is distributed in the hope that it will be useful, but
|
| 214 |
WITHOUT ANY WARRANTY; without even the implied warranty of
|
| 215 |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser
|
| 216 |
General Public License for more details.
|
| 217 |
|
| 218 |
You should have received a copy of the GNU Lesser General Public License
|
| 219 |
along with this library; if not, write to the Free Software Foundation,
|
| 220 |
Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
| 221 |
|
| 222 |
|
| 223 |
History:
|
| 224 |
========
|
| 225 |
|
| 226 |
1.3.4 - 8 February 2008, Ludovic Rousseau
|
| 227 |
- the serial driver could not be loaded because of the missing
|
| 228 |
symbol InterruptRead
|
| 229 |
- remove WAIT_FOR_SYSFS="bInterfaceProtocol" to do not delay udev
|
| 230 |
|
| 231 |
|
| 232 |
1.3.3 - 6 February 2008, Ludovic Rousseau
|
| 233 |
- add support for Lexar Smart Enterprise Guardian and Blutronics
|
| 234 |
Bludrive II CCID
|
| 235 |
- add support of TAG_IFD_POLLING_THREAD using IFDHPolling() to
|
| 236 |
detect asynchronous card movements. With this feature pcscd will
|
| 237 |
not poll the reader every 0.4 second for a card movement but will
|
| 238 |
wait until the reader sends a USB interrupt signal
|
| 239 |
- correct a bug with an ICCD-B device and a receive buffer smaller
|
| 240 |
than 4 bytes
|
| 241 |
- remove the sleep in the udev rule. It slows down the detection of
|
| 242 |
any USB device
|
| 243 |
- some minor bugs removed
|
| 244 |
|
| 245 |
|
| 246 |
1.3.2 - 22 January 2008, Ludovic Rousseau
|
| 247 |
- add support of Apple Mac OS X Leopard (10.5.1)
|
| 248 |
- solve a hotplug problem on Ubuntu 7.10 (reader was not detected)
|
| 249 |
- create a symlink from libccidtwin.so to libccidtwin.so.VERSION so
|
| 250 |
that the /etc/reader.conf configuration file do not need to edited
|
| 251 |
for each new driver version
|
| 252 |
- make driver for the GemPC Serial compile again
|
| 253 |
- some minor bugs removed
|
| 254 |
|
| 255 |
|
| 256 |
1.3.1 - 16 November 2007, Ludovic Rousseau
|
| 257 |
- add support for "Philips Semiconductors JCOP41V221" ICCD card,
|
| 258 |
O2Micro oz776 (ProductID 0x7772), CardMan5321, Giesecke & Devrient
|
| 259 |
StarSign Card Token 350 and 550, SafeNet IKey4000, Eutron
|
| 260 |
CryptoIdentity, Eutron Smart Pocket, Eutron Digipass 860, Lenovo
|
| 261 |
Integrated Smart Card Reader, "Kobil EMV CAP - SecOVID Reader III,
|
| 262 |
Charismathics token, Reiner-SCT cyberJack pinpad(a)
|
| 263 |
- improve support of Mac OS X and *BSD
|
| 264 |
- some minor bugs removed
|
| 265 |
|
| 266 |
|
| 267 |
1.3.0 - 10 May 2007, Ludovic Rousseau
|
| 268 |
- add support of ICCD version A and B
|
| 269 |
- add support for (new) KOBIL mIDentity, SchlumbergerSema Cyberflex
|
| 270 |
Access e-gate ICCD, Fujitsu Siemens Computers SmartCard USB 2A and
|
| 271 |
SmartCard Keyboard USB 2A readers, OmniKey CardMan 4321
|
| 272 |
- contrib/RSA_SecurID/RSA_SecurID_getpasswd: tool to get the on time
|
| 273 |
password also displayed on the token screen
|
| 274 |
- contrib/Kobil_mIDentity_switch: tool to activate the CCID reader
|
| 275 |
of the Kobil mIDentity. The tool should be started automatically
|
| 276 |
by the udev rule on Linux
|
| 277 |
- GemPC pinpad: localisation of the string "PIN blocked", add
|
| 278 |
Portuguese(pt), Dutch(nl) and Turkish(tr) localisations
|
| 279 |
- some minor bugs removed
|
| 280 |
|
| 281 |
1.2.1 - 27 January 2007, Ludovic Rousseau
|
| 282 |
- pcscd_ccid.rules: add non CCID generic (InterfaceClass: 0xFF)
|
| 283 |
readers
|
| 284 |
- INSTALL: document how to use --enable-udev on FreeBSD
|
| 285 |
- move the O2Micro Oz7762 from the unsupported to the supported list
|
| 286 |
since patches to support it are applied by default
|
| 287 |
(O2MICRO_OZ776_PATCH)
|
| 288 |
|
| 289 |
|
| 290 |
1.2.0 - 19 January 2007, Ludovic Rousseau
|
| 291 |
- add support for SCARD_ATTR_VENDOR_IFD_VERSION,
|
| 292 |
SCARD_ATTR_VENDOR_NAME and SCARD_ATTR_MAXINPUT tags used by
|
| 293 |
SCardGetAttrib(). Read SCARDGETATTRIB.txt for more documentation
|
| 294 |
- add support for OmniKey CardMan 5125, CardMan 1021, C3PO LTC32,
|
| 295 |
Teo by Xiring, HP USB Smartcard Reader
|
| 296 |
- use --enable-twinserial to build the serial reader driver
|
| 297 |
- use --enable-udev to configure for a use with Linux udev hotplug
|
| 298 |
mechanism. This will allow pcscd to avoid polling the USB bus
|
| 299 |
every 1 second
|
| 300 |
- some minor bugs removed
|
| 301 |
|
| 302 |
|
| 303 |
1.1.0 - 11 August 2006, Ludovic Rousseau
|
| 304 |
- support Extended APDU (up to 64KB) for readers in TPDU mode (many
|
| 305 |
readers) or Extended APDU mode (very rare). This only works for
|
| 306 |
T=1 cards.
|
| 307 |
- add support for C3PO LTC31 (new version), OmniKey CardMan 3021, HP
|
| 308 |
USB Smart Card Keyboard, Actividentity (ActiveCard) Activkey Sim,
|
| 309 |
id3 Semiconductors CL1356D and CL1356T, Alcor Micro AU9520
|
| 310 |
- support the contactless interface of the SCR331-DI-NTTCOM
|
| 311 |
- add support of FreeBSD
|
| 312 |
- increase the USB timeout used for PIN verify/modify to not timeout
|
| 313 |
before the reader
|
| 314 |
- the 4-bytes value returned by CM_IOCTL_GET_FEATURE_REQUEST shall
|
| 315 |
be encoded in big endian as documented in PCSC v2 part 10 ch 2.2
|
| 316 |
page 2. The applications using this feature shall be updated (to
|
| 317 |
respect the PCSC specification).
|
| 318 |
- use ./configure --enable-twinserial to compile and install the the
|
| 319 |
driver for the GemPC Twin serial
|
| 320 |
- some minor bugs removed
|
| 321 |
|
| 322 |
|
| 323 |
1.0.1 - 22 April 2006, Ludovic Rousseau
|
| 324 |
- add support for Axalto Reflex USB v3, SCM Micro SDI 010, Winbond
|
| 325 |
Electronics W81E381 chipset, Gemplus GemPC Card, Athena ASE IIIe
|
| 326 |
KB USB, OmniKey CardMan 3621
|
| 327 |
- support Solaris (Solaris uses a different libusb)
|
| 328 |
- better documentation for ./configure arguments
|
| 329 |
- improve support of Cherry XX44 keyboard for PIN verify and change
|
| 330 |
(circumvent firmware bugs)
|
| 331 |
- do not use LTPBundleFindValueWithKey() from pcscd since this
|
| 332 |
function has been removed from pcscd API
|
| 333 |
- use -fvisibility=hidden is available to limit the number of
|
| 334 |
exported symbols
|
| 335 |
|
| 336 |
|
| 337 |
1.0.0 - 3 March 2006, Ludovic Rousseau
|
| 338 |
- add support for ActivCard USB Reader 3.0, Athena ASE IIIe USB V2,
|
| 339 |
SCM Micro SCR 355, SCR 3311, SCR 3320, SCR 3340 ExpressCard54,
|
| 340 |
Gemplus GemCore SIM Pro, GemCore POS Pro (serial and USB), GemPC
|
| 341 |
Express (ExpressCard/54 interface), SmartEpad (v 2.0), OmniKey
|
| 342 |
CardMan 5121
|
| 343 |
- greatly improve support of PIN PAD readers. We now support TPDU
|
| 344 |
readers with T=1 cards
|
| 345 |
- use l10n strings for the Gemplus GemPC PIN PAD (it has a screen).
|
| 346 |
Supported languages are: de, en, es, fr, it
|
| 347 |
- rename ACS ACR 38 in ACR 38U-CCID since the ACR 38 is a different
|
| 348 |
reader and is not CCID compatible
|
| 349 |
- allow to select the Power On voltage using Info.plist instead of
|
| 350 |
recompiling the source code
|
| 351 |
- correct bugs in the support of multi-slots readers
|
| 352 |
- if the card is faster than the reader (TA1=97 for example) we try
|
| 353 |
to use a not-so-bad speed (corresponding to TA1=96, 95 or 94)
|
| 354 |
instead of the default speed of TA1=11
|
| 355 |
- the src/parse tool do not use the driver anymore. No need to
|
| 356 |
update the Info.plist file first.
|
| 357 |
- some minor bugs removed
|
| 358 |
|
| 359 |
|
| 360 |
0.9.4 - 27 November 2005, Ludovic Rousseau
|
| 361 |
- add support for Eutron SIM Pocket Combo, Eutron CryptoIdentity,
|
| 362 |
Verisign Secure Token and VeriSign Secure Storage Token, GemPC
|
| 363 |
Card (PCMCIA), SCM SCR331-DI NTTCom, SCM Micro SCR 3310-NTTCom,
|
| 364 |
Cherry ST-1044U, Cherry SmartTerminal ST-2XXX
|
| 365 |
- add support of PC/SC v2 part 10 CM_IOCTL_GET_FEATURE_REQUEST add
|
| 366 |
support of FEATURE_VERIFY_PIN_DIRECT and FEATURE_MODIFY_PIN_DIRECT
|
| 367 |
remove support of IOCTL_SMARTCARD_VENDOR_VERIFY_PIN (now
|
| 368 |
obsoleted). A sample code is available in examples/scardcontrol.c
|
| 369 |
- we need pcsc-lite 1.2.9-beta9 since some structures used for PIN
|
| 370 |
pad readers are defined by pcsc-lite
|
| 371 |
- some (bogus) cards require an extra EGT but the ATR does not say
|
| 372 |
so. We try to detect the bogus cards and set TC1=2
|
| 373 |
- IFDHSetProtocolParameters(): only use a data rate supported by the
|
| 374 |
reader in the PPS negociation, otherwise we stay at the default
|
| 375 |
speed.
|
| 376 |
- calculate and store the read timeout according to the card ATR
|
| 377 |
instead of using a fixed value of 60 seconds
|
| 378 |
- increase the read timeout if the card sends and WTX request
|
| 379 |
- improve support of GemPC Twin and GemPC Card (serial protocol)
|
| 380 |
- reset the device on close only if DRIVER_OPTION_RESET_ON_CLOSE is
|
| 381 |
set. The problem was that a device reset also disconnects the
|
| 382 |
keyboard on a keyboard + reader device.
|
| 383 |
- use color logs
|
| 384 |
- some minor bugs removed
|
| 385 |
|
| 386 |
|
| 387 |
0.9.3 - 14 March 2005, Ludovic Rousseau
|
| 388 |
- change the licence from GNU GPL to GNU Lesser GPL (LGPL)
|
| 389 |
- add support for ACS ACR 38, Kobil KAAN Base, Kobil KAAN Advanced,
|
| 390 |
Kobil KAAN SIM III, Kobil KAAN mIDentity, SCM Micro SCR 331,
|
| 391 |
SCM Micro SCR 331-DI, SCM Micro SCR 335, SCM Micro SCR 3310,
|
| 392 |
SCM Micro SCR 532, Cherry XX44 readers
|
| 393 |
- improve communication speed with readers featuring "Automatic PPS
|
| 394 |
made by the CCID"
|
| 395 |
- switch the Cherry xx33 reader in ISO mode if power up in EMV mode
|
| 396 |
fails.
|
| 397 |
- add support of character level readers. Thanks to O2Micro for the
|
| 398 |
patch
|
| 399 |
- add support for the O2Micro OZ776S reader but the reader firmware
|
| 400 |
is still bogus
|
| 401 |
- check firmware version to avoid firmwares with bugs. You can still
|
| 402 |
use a bogus firmware by setting DRIVER_OPTION_USE_BOGUS_FIRMWARE
|
| 403 |
in Info.plist
|
| 404 |
- some minor bugs removed
|
| 405 |
|
| 406 |
0.9.2 - 15 August 2004, Ludovic Rousseau
|
| 407 |
- T=1 TPDU code:
|
| 408 |
. the work on T=1 TPDU code was possible thanks to Gemplus
|
| 409 |
validation team who helped me test, debug and bring the code to
|
| 410 |
an EMV validation level. Thanks to Jérôme, Jean-Yves, Xavier and
|
| 411 |
the Gemplus readers department
|
| 412 |
. error code was not checked correctly
|
| 413 |
. avoid a (nearly) infinite loop when resynch are needed.
|
| 414 |
. correctly initialise an internal value to allow more than one
|
| 415 |
reader to work
|
| 416 |
- multi-slots readers
|
| 417 |
. add support for multi-slots readers. The only one I have is a
|
| 418 |
SCM Micro SCR 331-DI with a contact and a contactless interface.
|
| 419 |
The contactless interface may or may not work for you since the
|
| 420 |
reader uses proprietary (undocumented) commands.
|
| 421 |
- GemPC Twin serial reader
|
| 422 |
. perform a command (get the reader firmware) to be sure a GemPC
|
| 423 |
Twin (serial or pcmcia) reader is connected
|
| 424 |
. use a dynamic timeout when reading the serial port.
|
| 425 |
The first timeout used when detecting the reader is 2 seconds to
|
| 426 |
not wait too long if no reader is connected. Later timeouts are
|
| 427 |
set to 1 minute to allow long time APDU.
|
| 428 |
- use `pkg-config libpcsclite --cflags` to locate the pcsc-lite
|
| 429 |
header files
|
| 430 |
- use `pkg-config --print-errors --atleast-version=1.2.9-beta5 libpcsclite`
|
| 431 |
to test the pcsc-lite version
|
| 432 |
- code improvements thanks to the splint tool (http://www.splint.org/)
|
| 433 |
|
| 434 |
0.9.1 - 1 July 2004, Ludovic Rousseau
|
| 435 |
- I forgot to define IFD_PARITY_ERROR in a .h file
|
| 436 |
|
| 437 |
0.9.0 - 1 July 2004, Ludovic Rousseau
|
| 438 |
- The T=1 TPDU automata from Carlos Prados' Towitoko driver is very
|
| 439 |
limited and do not support error management mechanisms.
|
| 440 |
I then used the T=1 TPDU automata from OpenCT (OpenSC project).
|
| 441 |
This automata is much more powerful but still lacks a lot of error
|
| 442 |
management code.
|
| 443 |
I then added all the needed code to reach the quality level
|
| 444 |
requested by the EMV standard.
|
| 445 |
- add support for new readers:
|
| 446 |
. Advanced Card Systems ACR 38
|
| 447 |
. Cherry XX33
|
| 448 |
. Dell keyboard SK-3106
|
| 449 |
. Dell smart card reader keyboard
|
| 450 |
. SCR 333
|
| 451 |
- add support of multi procotol cards (T=0 and T=1)
|
| 452 |
- the debug level is now dynamic and set in the Info.plist file (no
|
| 453 |
need to recompile the driver any more)
|
| 454 |
- add support for the libusb naming scheme: usb:%04x/%04x:libusb:%s
|
| 455 |
- INSTALL: add a "configuring the driver for the serial reader
|
| 456 |
(GemPC Twin)" part
|
| 457 |
- use `pkg-config libpcsclite --variable=usbdropdir` so you do not
|
| 458 |
have to use --enable-usbdropdir=DIR or --enable-ccidtwindir=DIR
|
| 459 |
even if pcscd does not use the default /usr/local/pcsc/drivers
|
| 460 |
- add support of IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE and
|
| 461 |
IOCTL_SMARTCARD_VENDOR_VERIFY_PIN in IFDHControl()
|
| 462 |
- read ifdDriverOptions from Info.plist to limit the use of
|
| 463 |
IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE (idea from Peter Williams)
|
| 464 |
- provide an example of use of SCardControl()
|
| 465 |
IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE and
|
| 466 |
IOCTL_SMARTCARD_VENDOR_VERIFY_PIN in example/
|
| 467 |
- add a --enable-pcsclite option (default to yes) so that the driver
|
| 468 |
can be compiled for a different framework (one needing
|
| 469 |
tokenparser.l like Solaris)
|
| 470 |
- Reset action is power off and power on, not just power on
|
| 471 |
- use the include files from pcsc-lite
|
| 472 |
- add a mechanism to allow power on at 1.8V, 3V and then 5V as
|
| 473 |
specified by ISO 7816. We still use 5V for now to avoid problems
|
| 474 |
with non ISO compliant cards
|
| 475 |
|
| 476 |
0.4.1 - 14 February 2004, Ludovic Rousseau
|
| 477 |
- distribute missing files readers/supported_readers.txt and
|
| 478 |
src/create_Info_plist.pl
|
| 479 |
'make install' failed because of this.
|
| 480 |
|
| 481 |
0.4.0 - 13 February 2004, Ludovic Rousseau
|
| 482 |
- support of T=1 with TPDU readers. A lot of the T=1 code comes from
|
| 483 |
Carlos Prados towitoko driver.
|
| 484 |
My code is GNU GPL, his code is GNU LGPL so the global driver is
|
| 485 |
GNU GPL
|
| 486 |
- PPS negotiation if the reader does not do it automatically
|
| 487 |
- add support for the Silitek SK-3105 keyboard. It's a USB device
|
| 488 |
with multiple interfaces
|
| 489 |
- use the create_Info_plist.pl script to generate the installed
|
| 490 |
Info.plist from an Info.plist template and a list of supported
|
| 491 |
readers. The Info.plist was too "complex" to maintain by hand
|
| 492 |
since it now contains 11 entries
|
| 493 |
- add support of IFDHCreateChannelByName to avoid wrong reader
|
| 494 |
enumeration. This is not complete if you have multiple _identical_
|
| 495 |
readers. You need to use a > 1.2.0 pcsc-lite version (not yet
|
| 496 |
released at that time)
|
| 497 |
- build but do not install the serial ccidtwin driver by default
|
| 498 |
since it is useless on computers without a serial port or without
|
| 499 |
this reader for example.
|
| 500 |
- read and write timeouts are not symmetric. write timout can be
|
| 501 |
shorter since the reader and card is not supposed to do anything
|
| 502 |
before receiving (write) a command
|
| 503 |
- do not try to find usb.h and other libusb files if
|
| 504 |
--disable-libusb is used. Needed if you only want to build the
|
| 505 |
serial driver. Thanks to Niki Waibel for the patch
|
| 506 |
- add a --enable-ccidtwindir argument to ./configure to specify the
|
| 507 |
serial GemPC Twin installation directory
|
| 508 |
- debug and code improvements and simplifications
|
| 509 |
|
| 510 |
0.3.2 - 4 November 2003, Ludovic Rousseau
|
| 511 |
- src/commands.c: correct a stupid bug that occurs with an APDU with
|
| 512 |
2 bytes response.
|
| 513 |
- Info.plist: add SPR 532 in list of supported readers
|
| 514 |
- parse.c: do not exit if the InterfaceClass is 0xFF (proprietary).
|
| 515 |
It is the case with old readers manufactured before the final
|
| 516 |
release of the CCID specs.
|
| 517 |
- move LTC31 reader from unsupported to supported reader list. It
|
| 518 |
was my f ault since in used odd INS byte in my test applet and odd
|
| 519 |
INS bytes are forbidden by ISO 7816-4 ch. 5.4.2 Instruction byte.
|
| 520 |
Thanks to Josep Moné s Teixidor for pointing the problem.
|
| 521 |
- src/commands.c: comment out the automatic GET RESPONSE part. I
|
| 522 |
don't think it should be in the driver. Maybe in pcscd instead?
|
| 523 |
|
| 524 |
0.3.1 - 23 September 2003, Ludovic Rouseau
|
| 525 |
- add --enable-multi-thread (enabled by default) for thread safe
|
| 526 |
support an APDU multiplexing. You will need pcsc-lite-1.2.0-rc3 or
|
| 527 |
above to use this feature.
|
| 528 |
- add --enable-libusb=PATH option is your libusb is not installed in
|
| 529 |
/usr or /usr/local
|
| 530 |
- honor DESTDIR in install rules (closes [ #300110 ]). Thanks to
|
| 531 |
Ville Skyttä for the patch.
|
| 532 |
- src/ccid.c: do not switch the GemPC Key and GemPC Twin in APDU
|
| 533 |
mode since it also swicth in EMV mode and may not work with non
|
| 534 |
EMV cards
|
| 535 |
- src/ccid_serial.c: complete reimplementation of the Twin serial
|
| 536 |
protocol using a finite state automata (code much simpler)
|
| 537 |
|
| 538 |
0.3.0 - 10 September 2003, Ludovic Rousseau
|
| 539 |
- support of GemPC Twin connected to a serial port. Thanks to Niki
|
| 540 |
W. Waibel for a working prototype.
|
| 541 |
- support of auto voltage at power up if the reader support it
|
| 542 |
instead of forcing a 5V in all cases.
|
| 543 |
- support of APDU mode instead of just TPDU if the reader support
|
| 544 |
it. Thanks to Jean-Luc Giraud for the idea and inspiration I got
|
| 545 |
from his "concurrent" driver.
|
| 546 |
- support of "time request" from the card.
|
| 547 |
- parse: new indentation for more readability of supported features.
|
| 548 |
- switch the GemPC Key and GemPC Twin in APDU mode since they
|
| 549 |
support it but do not announce it in the dwFeatures.
|
| 550 |
- new build process using autoconf/automake.
|
| 551 |
|
| 552 |
0.2.0 - 26 August 2003, Ludovic Rousseau
|
| 553 |
- Works under MacOS X
|
| 554 |
- Info.plist: use an <array></array> for the alias enumeration
|
| 555 |
- Makefile rework for *BSD and MacOS X
|
| 556 |
|
| 557 |
0.1.0 - 13 August 2003, Ludovic Rousseau
|
| 558 |
- First public release
|
| 559 |
|
| 560 |
|
| 561 |
References:
|
| 562 |
===========
|
| 563 |
|
| 564 |
[1] http://www.usb.org/developers/devclass_docs/ccid_classspec_1_00a.pdf
|
| 565 |
[2] http://www.gemplus.com/products/gempc433/
|
| 566 |
[3] http://www.gemplus.com/products/gempckey/
|
| 567 |
[4] http://www.gemplus.com/products/gempctwin/
|
| 568 |
[5] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=21
|
| 569 |
[6] http://www.scmmicro.com/security/SCR331.html
|
| 570 |
[7] http://www.scmmicro.com/security/SCR335.html
|
| 571 |
[8] http://www.c3po.es/ltc31.html
|
| 572 |
[9] http://www.scmmicro.com/security/SPR532.html
|
| 573 |
[10] http://www.activcard.com/products/usb_reader.html
|
| 574 |
[11] http://www.scmmicro.com/security/SCR331-DI.html
|
| 575 |
[12] http://www.silitek.com/prod/getProduct.do?xml_id=4_2&menu_id=4_2_8&cid=1_8_5
|
| 576 |
[13] http://www.c3po.es/ltc32.html
|
| 577 |
[14] http://www.c3po.es/tltc2usb.html
|
| 578 |
[15] http://www.scmmicro.com/security/SCR333.html
|
| 579 |
[16] http://www.acs.com.hk/Product_Readers.asp?productID=107&PCate=Products_PC_Linked_SmartCard_Readers
|
| 580 |
[17] http://www.scmmicro.com/support/pcs_product_drivers.html
|
| 581 |
[18] http://www.cherrycorp.com/english/advanced-line/advanced-line_smartboard_g83-6744.htm
|
| 582 |
[19] http://www.kobil.com/e/products/smartcard/kaan-base.php
|
| 583 |
[20] http://www.kobil.com/e/products/smartcard/kaan-advanced.php
|
| 584 |
[21] http://www.kobil.com/d/products/smartcard/kaansim3.php
|
| 585 |
[22] http://www.kobil.com/e/products/index.php?s=midentity
|
| 586 |
[23] http://www.ntt.com/jpki/SCR331DI.html
|
| 587 |
[24] http://www.verisign.co.uk/products-services/security-services/unified-authentication/usb-tokens/
|
| 588 |
[25] http://www.eutron.com/simpocket.asp
|
| 589 |
[26] http://www.cryptoidentity.eutron.com/eng/home.asp
|
| 590 |
[27] http://www.cherry.de/english/advanced-line/advanced_smartterminal_st-1044u.htm
|
| 591 |
[28] http://www.ntt.com/jpki/scr3310.html
|
| 592 |
[29] http://www.asedrive.com/product.asp?pid=1
|
| 593 |
[30] http://www.scmmicro.com/security/SCR3310.html
|
| 594 |
[31] http://scmmicro.com/security/SCR3311.html
|
| 595 |
[31] http://scmmicro.com/security/SCR3320.html
|
| 596 |
[32] http://www.smartepad.com.br/
|
| 597 |
[33] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=37
|
| 598 |
[34] http://www.scmmicro.com/security/SCR3340.html
|
| 599 |
[35] http://www.cherry.de/deutsch/advanced-line/advanced_smart_terminal_st-2000u.htm
|
| 600 |
[36] http://www.omnikey.com/index.php?id=products&tx_okprod_pi1[product]=29
|
| 601 |
[37] http://www.omnikey.com/index.php?id=products&tx_okprod_pi1[product]=33
|
| 602 |
[38] http://www.reflexreaders.com/Products/reflex_usbnew.html
|
| 603 |
[39] http://www.scmmicro.com/security/SDI_010.html
|
| 604 |
[40] http://www.winbond.com.tw/E-WINBONDHTM/partner/b_2_e_4.htm
|
| 605 |
[41] http://www.gemplus.com/products/gempc_card/
|
| 606 |
[42] http://www.asedrive.com/product.asp?pid=2
|
| 607 |
[43] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=31
|
| 608 |
[44] http://h18000.www1.hp.com/products/quickspecs/12346_na/12346_na.HTML
|
| 609 |
[45] http://www.id3semiconductors.com/produits/cl1356D.htm
|
| 610 |
[46] http://www.alcormicro.com/products_detail.php?main_id=8&p_id=21
|
| 611 |
[47] http://www.tai-hao.com/english/products_detail.php?main_id=4&second_id=13&p_id=53&now_rows=1
|
| 612 |
[48] http://www.id3semiconductors.com/produits/cl1356T.htm
|
| 613 |
[49] http://www.omnikey.com/index.php?id=products&tx_okprod_pi1[product]=48
|
| 614 |
[50] http://www.rsasecurity.com/products/securid/datasheets/SID800_DS_0205.pdf
|
| 615 |
[51] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=39
|
| 616 |
[52] http://www.teobyxiring.com/
|
| 617 |
[53] http://www.fujitsu-siemens.com/solutions/business_solutions/security/security_products/smartcase_scr_usbex.html
|
| 618 |
[54] http://www.fujitsu-siemens.com/solutions/business_solutions/security/security_products/smartcase_kbpc_cx.html
|
| 619 |
[55] http://omnikey.aaitg.com/?id=products&tx_okprod_pi1[product]=50
|
| 620 |
[56] http://omnikey.aaitg.com/?id=products&tx_okprod_pi1[product]=41
|
| 621 |
[57] http://www.gi-de.com/portal/page?_pageid=42,126834&_dad=portal&_schema=PORTAL
|
| 622 |
[58] http://www.eutronsec.com/infosecurity/Contents/ProductLine/Details.aspx?IDProd=26&IDFamiglia=3
|
| 623 |
[59] http://www.eutronsec.com/infosecurity/Contents/ProductLine/Details.aspx?IDProd=62&IDFamiglia=39
|
| 624 |
[60] http://www.lexar.com/enterprise/ent_ppsd.html
|
| 625 |
|
| 626 |
$Id$
|
| 627 |
|
| 628 |
vim:ts=20
|
Parent Directory
| 
Revision Log