On-card signature w/ ALG_RSA_CRT in JCOP 41 simulator?

My dev environment is Eclipse 3.0.2, jdk 1.4.2, with JCOP 3.1 pre-release tools.
I'm using JCRMI with the JCOP 41 simulator.
I've gotten the stock Sun PhotoCard demo and client to run.
Now I want to:
In the simulator:
1) Generate an oncard key using ALG_RSA_CRT with 512
2) Use the priv key to create a signature of a photo using ALG_RSA_SHA_PKCS1
From the terminal:
3) Get the public modulus of the public key from the card, public exponents are the same.
4) Get the signature of the photo from the card
5) Reconstruct a RSAPublicKey using the modulus from the card with a KeyFactory and a RSAPublicKeySpec.
6) Create a signature verifier using SHA1withRSA
7) Verify the signature from the card.
All the data lengths coming back from the card appear correct. There are no exceptions thrown. The verify simpy returns false.
Before I start posting code, my naive, non-crypto guy question is about RSA versus RSA_CRT. The JCOP 41 simulator can only create RSA_CRT keypairs. The Sun JCE on the terminal only has RSA, not RSA_CRT. This seems to be a likely culprit. Yet it seems to me (non-crypto guy) that the difference only is for the private key not the public key that I'm exporting. Indeed, if there were such a difference it seems like the API would contain a RSACRTPrivateKeySpec, etc.
Any JCOP 41 users creating keys oncard with success verifying signatures offcard?
Thanks in advance,
- Jeff.

Thanks Jan. Problem solved.
You confirmed my idea about RSA vs. RSA_CRT. I suspected there was no public key difference. So at least I knew THAT wasn't the problem. It was actually reading (and re-reading) your related thread with Mzee Dubo on RSA signatures that led me to the problem.
In that thread you questioned the sizes of the mod/exp pair being returned. I knew that those were correct in my case because I was printing the size and values of both. But I had incorrectly assumed that the SHA-1 signature size was going to be 20 bytes, I guess I read that somewhere. (silly non-crypto guy!)
Once I printed out the actual size of 64 bytes and returned the ENTIRE signature it worked fine. So what's up with 64 bytes? I could have sworn that I read the size was 20 bytes somewhere. Is there some kind of ASN.1 DER encoding going on that makes the byte[] being returned bigger?
- Jeff

Similar Messages

How can I properly attach an Email 'business card' signature?

Hi,
I was wondering if there were any better ways to attach a business card signature with mail.
Currently I have a small business card that I have optimized to around 60 kb, I use the signature feature in Mail to drag it in and add my standard business disclaimer stuff underneath.
Thing is if I send it to another MacMail account it displays fine but if I send it to Gmail or Yahoo it appears as a seperate attachment that needs to be downloaded etc.
Is there anyway round this? A way for it to just appear under the text of my email for any Email host or software without it appearing as an attachment. Outlook seems to allow the function and I'm allways receiving full page HTML graphical advertisments in my inbox, simular to the ones when you get a receipt etc, should I use the same principals?
I'd also like to know if I can make it link to my website using some code from Image Shack or similar online host.
Many thanks.

Hi, have you gone to Mail>Edit>Attachments>Always send Windows friendly attachments?

Anyone ever try 2 use a credit card signature trasaction pad as MIDI input?

I've come across a Transaction Team credit card signature touch and signature pad. From what I've read about it, it seems like one of the more versatile ones.
http://www.handheld.com/Site.aspx/na/en/product_center/hardware/?product=118
I just have to use this as a MIDI imput for my Mac w/ Logic! Does anyone have any suggestions at all? I am waiting to hear back from the company to see if they have mac drivers. I sure hope this deranged idea is possible!!! Any suggestions, to at least, some cool, do-it-yourself gear websites? Thanks!

You might also try a Wacom Intuos tablet. I have 9" by 12" (230mm by 300mm) tablet and software that allows me to choose which parameters to modify.
The pen is pressure sensitive but not quite as flexible as the Wacom mouse which is easier to use since you don't have to pick it up all the time (moving from MIDI controller to pen is a bit of a pain).
I've found the accuracy of pressure pretty variable so you can't consistently use it for volume, for instance, but it's good enough to be able to do key switching using transform. It has 1024 pressure sentivity levels so it may just be my technique.
However, if you're after something really wacky - and quite cheap - try this:
http://www.vrealities.com/P5.html
I have one of these VR gloves and use it with the follwing software:
http://www.simulus.org/p5glove/
It's quite amazing what you can do with it. A bit like a Theremin on heat. I bought my glove on ebay for $30
Pete

I have a business card signature and it comes out fuzzy when attached as a signature??

I received a business card signature from my company and it is perfect but once I attach it as a signature in an email it is fuzzy?
Ralph

First, update iTunes, then connect the phone to the computer and do a restore. This will also get your iOS up to date. Your phone should operate correctly after doing this, if not, you will most likely need to have the phone serviced or replaced.

Smart card signature not found although it is plugged in with acrobat XI pro

We have upgraded to Acrobat XI pro, and our smart card signature is not found, however, when I open the file in adobe reader it locates my signature.

Hi Bill. Thanks for replying.
Unfortunately, I don't have the option of using the original DOCX file. The author lost it, leaving only the pdf around
I'm using AA XI 11.0.06. Upgraded this morning. That's running on Windows 7 Ultimate 64.
I get the boundary boxes by clicking on the 'edit text and images' tool, and they appear. Or don't in this case
I only need to change a few characters in the file. However, even just opening up the file in AA and then saving, the "A = " "text" gets deleted.
Could it perhaps be something to do with embedded or missing maths fonts on my machine? I mean, I don't get any warnings, just can't do anything with the A and AB italic bold text.
Thanks!
-- gyre --

JCOP Tools 3.1.1.b and other Cards

Hello
At the moment I'am working at my degree dissertation. A little part of this dissertation is to write a cardlet on a javacard.
I have got the JCOP Tools 3.1.1.b for Eclipse, but JavaCards of other producers: Safenet Model 330J, GemSafeXpresso 32 k and cyberflex Access e-gate 32K(Schlumberger / Axalto).
At the moment i don't know how to bring my java card applet on the card.
In the JCOP Tools i can only choose the preconfigured Type "JCOP Engeneering Sample". Is there a way to become more preconfigured card types? Or anyone knows the custom type settings for any of the cards?

I am on a similiar assignment in my office and not an expert but after a couple of weeks of research i have found a few things.
1. Its better to get JCOP20,JCOP30 or JCOP41 cards for compatibility reason and avoiding over work
2. Buy a PC/SC compliant Smart Card Reader for compatibility reasons.
i have already ordered these.
Secondly check this link for loader application, code is fine but cap file version was the issue.
http://forum.java.sun.com/thread.jspa?forumID=23&threadID=702955
i havnot got the real cards but i believe that JCOP tools will be able to uplaod the application on it without the need of above code. As running simulations we have option of Install in the ide.
Any ways some expert guy on the forum will answer you shortly -:)
Bilal

Seeking information on JCOP cards

I have been hunting around the internet for information on JCOP cards, and I find this a disorienting experience. It seems that the team from Zurich has moved to Germany, many of the links on their site are broken, they don't answer my emails and I can not find a phone contact for their team.
Here are some things I am trying to find out. Perhaps those already familiar with these cards can point me in the right direction?
- I am looking for technical specs, documentation, manuals that describe either the JCOP cards or JCOP Tools. So far all I have found is IBM's "technical brief" which is too brief. There must be more documentation out there. Where is it?
- What readers will work with the cards? I am looking at JCOP30, the first contactless card. Their web site has no list of recommended or supported readers.
- What API calls are available on the JCOP30's ROM?
- What parameters to those API calls are supported? For instance what key lengths, cipher parameters, etc. are supported?
Any help is appreciated. In particular, if there is somewhere a large PDF which describes the card in detail I would really like to see it. Without such specifics I can not determine if the card is appropriate for our neesd.

Let me clarify a few things: JCOP is a smart-card operating system developed by the IBM Zurich Research labs, and now maintained by IBM Development in Boeblingen.
This operating system is licensed to different chip manufacturers, such as NXP (ex Philips Semiconductors). IBM only makes the software, not the hardware. Thus, for exact information on actual products, you need to contact the silicon manufacturers.
JCOP Tools on the other hand the Eclipse-based development tools that IBM provides for Java Card development, especially geared towards JCOP-based cards.
Assuming you are talking about the JCOP30v2 on Philips P8RF5016, the card will work with any ISO14443 Type A compliant reader.
The most commonly used smart-card interface is PC/SC, a middleware layer backed by Microsoft, and part of the Windows operating system. JPCSC is a Java-wrapper around the native PC/SC API. JCOP Tools includes JPCSC and uses it on Linux and MacOS X. On Windows, JCOP Tools uses the native PC/SC API directly.
OCF is/was a failed attempt at creating smart card middleware. The consortium was dissolved many years ago (1999), and why the website still exists is a mistery. I strongly discourage the use of OCF.
JCOP Tools also includes the JCOP offcard API, which is a comprehensive smart card API with special support for Java Card and GlobalPlatform.
that sits on top of native PC/SC, JPCSC, and some other proprietary card middleware.
JCOP Tools contains everything that is needed to develop Java Card applications, including a simulation environment that supports source-level debugging. There are wizards that will create a GP-compliant skeleton applet for you.
A technical brief on JCOP Tools is available from ftp://ftp.software.ibm.com/software/pervasive/info/JCOPTools3Brief.pdf
Note that this refers to an older version of JCOP Tools; the current version has additional features, such as the real-time bytecode view and runs on the latest version of Eclipse (3.2.1).
Hope that clears some of your questions up.

Unable to connect offcard terminal with jcop simulator

Hi all,
I have made a JavaCard applet, called DisplayApplet.
I am using Eclipse with the JCOP tools plugin.
But now I want to make use of an own Terminal that connects to the applet and communicates to it using APDUs.
I don't have a smart card reader/card, so I want to use the simulation environment.
Now I read that I must use the "Remote" value in the JCTerminal constructor to connect to the simulation environment, but it doesn't work (of course I specify the remote value as input parameter).
I am unable to open a terminal.
I get the following exception at the term.open() command:
can't find/open/connect/reset smartcard/reader:
Failed to open [localhost:8050]: Connection refused: connect
Can anyone tell me what's wrong and how I can connect from an own made terminal to a JCOP simulation (I want to run the terminal within Eclipse, because I want to add a UI later on top of it) ??
Here is the code of my own made HostTerminal:
import com.ibm.jc.*;
public class HostTerminal {
     public static final String remoteTermName = "Remote";
     public static final String nativeTermName = "pcsc:4";
     public static final String remoteTermPara = null;
     public static final String nativeTermPara = null;
     public static void main(String[] args) {
          String termName = nativeTermName;
          String termPara = nativeTermPara;
          if (args.length > 0) {
                               if (!args[0].equals("native")) {
                    if (args[0].equals("remote")) {
                         termName = remoteTermName;
                         termPara = remoteTermPara;
                    } else {
                         try {
                              System.out.println("args[0] > " + args[0]);
                              System.out.println("args[1] > " + args[1]);
                              termName = args[0];
                              termPara = args[1];
                         } catch (Exception e) {
                              System.out.println("invalid command line options");
                              System.exit(1);
          // create terminal, i.e. create a connection to a reader
          // and wait for a card insertion
          JCTerminal term = null;
          try {
               term = JCTerminal.getInstance("Remote", null);
               term.open();
               term.waitForCard(5000);
          } catch (Exception e) {
               System.out.println(
                    "can't find/open/connect/reset smartcard/reader: "
                         + e.getMessage());
               System.exit(1);
          System.out.println("Connected to reader and card terminal ...");
          // now get the object representing the connection to the card
          JCard card = null;
          try {
               card = new JCard(term, null, 1000);
          } catch (Exception e) {
               System.out.println(
                    "can't connect to card in reader: " + e.getMessage());
               System.exit(1);
          String s;
          // get atr of card and print it
          try {
               ATR atr = card.getATR();
               s = JCInfo.atrToString(atr);
               System.out.println("Connected to card and received ATR: " + s);
          } catch (Exception e) {
               System.out.println("can't get ATR: " + e.getMessage());
               System.exit(1);
          // Note here that the DisplayApplet has to have to aid "display". The IDE
          // supports ascii characters in AIDs by using | when editing AIDs.
          // For instance, |display results in 636F756E746572.
          System.out.println("Selecting Display applet ...");
          DisplayApplet displayApplet = null;
          try {
               byte[] aid = ("phil0Display").getBytes();
               displayApplet = new DisplayApplet(card, aid);
               displayApplet.select();
               s = JCInfo.toHex(aid, 0, aid.length);
               System.out.println(
                    "Selecting of Display applet with aid " + s + " succeeded");
          } catch (Exception e) {
               System.out.println("can't select Display: " + e.getMessage());
               System.exit(1);
          }

If you run the JavaCard simulator from within Eclipse make sure you disconnect the JCOP shell before trying to connect via JCTerminal() from your Java program. Use the command /close
If you want to disconnect the JCOP shell automatically modify your "Java Card Application" run-configuration:
set Shell commands to execute: to /close
BTW: You were talking about JCOP 3.0, the Eclipse 2.1-plugin or do you use the new pre-release version JCOP 3.1 for Eclipse 3?

Verifying a Digital Signature

I have a smart card, which I am trying to use to digitally sign some bytes. Then I want to verify the signature using the public key which I can get from the certificate on the smart card.
I am able to send some bytes to the card (using an apdu) and get back some RSA signed bytes. But when I try to verify the signature, it always returns false.
To verify, I do:
X509Certificate x = ... //gets the certificate from the card
Signature sig = Signature.getInstance(x.getSigAlgName()); //"SHA1withRSA"
sig.initVerify(x.getPublicKey());
sig.update(dataBytes, 0, dataBytes.length);
boolean isSigned = sig.verify(signed);
As far as I can tell, this part is good.
I think my problem is related to how I am sending the bytes to the card to get signed. Sending dataBytes in plaintext returns errors regarding length. It seems the signing command I am using on the card wants the data to equal the key length (data=128 byte, key=1024 bit). So what I did next was an attempt to hash the data and then pad it before I send it to the card.
     MessageDigest md = MessageDigest.getInstance("SHA1");
     md.update(dataBytes);
     byte [] digest = md.digest();
     PKCS1SignaturePadding pkcs1 = new PKCS1SignaturePadding(PKCS1SignaturePadding.SHA1);
     byte [] padded = pkcs1.encode(digest, 128);
But after I sign, I try to verify the signature but it still returns false. I'm not sure if I'm doing something wrong or if I'm misunderstanding something (I'm relatively new to digital signatures and smart cards).

PKCS#7 SignedData objects are far more complex then it looks like you are taking them. First the PKCS#7 SignedData object will contain the OID for the message digest algorithm used and for the encryption algorithm used. From the looks of your code you are simply assuming MD5.
It also contains all of the data that was signed which is typically much more than just the document. It also of course contains the public keys and signatures which singed the document. In your case it will probably only have one public certificate and one signature.
Also note that a signature is an encrypted hash. Looking at your code I do not see you use encryption at all or rather for verification decryption.
Here is the basic process a signature takes.
MessageDigest md = MessageDigest.getInstance(algOID);
byte[] digest = md.digest(message.getBytes(charEncoding));
Cipher c = Cipher.getInstance("RSA/2/PKCS1Padding");
c.init(Cipher.ENCRYPT_MODE, priKey);
byte[] signature = c.doFinal(digest);Note that the resulting byte array is not the message digest but the encrypted message digest. You must use the corresponding public key to decrypt the signature to get the message digest value. It is because the trusted public key can decrypt the correct message digest that we know it was encrypted by the holder of the private key. It is because the decrypted message digest value is equal to my computed message digest value that we know the document has not be altered...
Now PKCS#7 SignedData does not take the message digest of the document, in your case your PDF. It creates a message digest on an ASN.1 object which includes the bytes of your document plus a bunch of meta data.
For more info on the exact format of a PKCS#7 signature file check out
http://www.rsasecurity.com/rsalabs/pkcs/pkcs-7/index.html
Look through this doucment for SignedData as a starting place and follow through all of the sub objects that make up a SignedData object. This will give you an idea of what is involved.

How to start with Card programming !

Hello,
I want to learn card programming. For this i want to know few things.
1) Where can i find an IDE to write program ?
2) Do we get any simulator in it ?
3) How to compile and run the card program.
Right now i can not buy a reader or card. Just want to develop in simulator. How to start ?
Please, help me. I do not know anything about it.
Thanks,
Abhijit Chandekar

I want to learn card programming.http://developers.sun.com/techtopics/mobility/javacard/articles/
Read "An Introduction to Java Card Technology" Part 1 to 3 for starting with java cards.
1) Where can i find an IDE to write program ?The JCOP tools plugin for Eclipse is the cheapest IDE i know.
http://www.zurich.ibm.com/jcop/products/tools.html
2) Do we get any simulator in it ?Use CREF from the Java card development Kit or the JCOP emulator from the JCOP tools.
3) How to compile and run the card program.See the Java Card Development Kit User’s Guide that comes with the Java Card JDK.
@the other forum member:
May be we should start creating a forum-FAQ which will be posted once a week. That would make it easier to help all the "newbies"...
Someone interested?
Jan

JCOP or what else???

Hi Guys, I'm new in this forum and it's just one month that I' m working with the Java Card environment in order to install an applet inside a smart card. Since I am completely "alone" I still have many "technical" doubts.
I have downloaded the java card kit 2.2.2 and I work with Eclipse IDE. I have heard about JCOP and I have understood through other discussions that it is quite difficult to obtain!
1) What is JCOP in particular?
2) Among other things is it also an installer??
3) Are there other programs that can substitute the JCOP?
4) I write applets with Eclipse through the javacard language, then I convert the class file into a cap file. After testing and debugging the applet the last step should be to load it into the card with an installer. Do I miss some steps???
Sorry for the amount of questions but I'm really in troubles!!!!
Thank you previously for any reply.

Dmitri_Shorin wrote:
1. JCOP is a developement environment for specific card OS made by IBM based on JavaCard and Open (Global) Platfrom.Not the whole truth.
1. JCOP is the smart card product.
2. JCOP Tools is the development environment, based on Eclipse IDE.
3. JCOP was initially developed by IBM and we thank IBM for making such a great product. Further development and maintenance is now done by NXP Semiconductors.
4. JCOP Tools supports JCOP because it complies with Java Card and GlobalPlatform card specification. Any JC/GP card will work with JCOP Tools. It does not discriminate any other JC/GP smart card OS.
2. JCOP loads and installs JavaCard applets using Global Platform specification.Yep. Java Card = 2 words; GlobalPlatform = 1 word. :)
3. For JavaCard debugger you can use JCDK debugger or alternatively Gemalto Developement Suite for SIM JavaCards.Gemalto Development Suite will only work with Gemalto cards.
4. Your order is correct. But I would prefere to debug the applet with any IDE and after convert it and load to the card.To make sure, you can use the cap file converter from Sun, incl. in the Java Card Kit. JCOP Tools implemented their own converter, according to the Java Card Virtual Machine Specification.

How to load an applet in card?

Hi everyone,
I use NetBeans and its JavaCard Simulator, protocol T = 0, and I am wandering how to load an applet using APDU tool instead of clicking on Run Projetc which do the mentioned thing. It would be helpfull if someone post ouptut and explain all used apdu commands.
Thanks,
Mare.

Here is the APDU trace:
Select Card Manager
=> 00 A4 04 00 08 A0 00 00 00 03 00 00 00 00
<= 6F 10 84 08 A0 00 00 00 03 00 00 00 A5 04 9F 65
    01 FF 90 00
Authenticate
cm> init-update 255
=> 80 50 00 00 08 09 41 55 62 DF F5 61 2B 00
<= 00 00 C6 D8 6A 1C B2 02 14 13 FF 02 00 00 93 73
    3A B8 2C 0F 8E A4 1D EF 84 60 77 12 90 00
cm> ext-auth plain
=> 84 82 00 00 10 B5 AA A8 E6 8B 73 57 F9 5D 37 6C
    D1 FE CF 56 32
<= 90 00
Install For Load
=> 80 E6 02 00 12 05 11 11 11 11 11 08 A0 00 00 00
    03 00 00 00 00 00 00 00
<= 00 90 00
Load Block 1
=> 80 E8 00 00 FF C4 82 01 65 01 00 1A DE CA FF ED
    02 02 04 00 01 05 11 11 11 11 11 0A 68 65 6C 6C
    6F 57 6F 72 6C 64 02 00 21 00 1A 00 21 00 0A 00
    0B 00 2A 00 0E 00 A1 00 0A 00 17 00 00 00 5A 02
    5A 00 00 00 00 00 00 01 01 00 04 00 0B 01 02 01
    07 A0 00 00 00 62 01 01 03 00 0A 01 06 11 11 11
    11 11 11 00 08 06 00 0E 00 00 00 80 03 00 FF 00
    07 01 00 00 00 1C 07 00 A1 00 01 10 18 8C 00 04
    7A 05 30 8F 00 09 3D 8C 00 02 18 1D 04 41 18 1D
    25 8B 00 03 7A 04 22 18 8B 00 07 60 03 7A 19 8B
    00 06 2D 1A 04 25 75 00 6D 00 06 00 00 00 1D 00
    01 00 2C 00 02 00 3B 00 40 00 4A 00 41 00 57 00
    42 00 62 19 8B 00 05 3B 19 03 1A 07 25 8B 00 08
    70 49 19 8B 00 05 3B 19 03 1A 07 25 8B 00 08 70
    3A 19 8B 00 05 3B 19 03 1A 07 25 8B 00 08 70 2B
    03 32 04 8D 00 00 32 1F 8D 00 01 70 1E 05 8D 00
    00 32 1F 8D 00
<= 00 90 00
Load other Blocks with 80 E8 00 xx ... which xx is the Block number
Load Last Block
=> 80 E8 80 01 6A 00 01 70 13 03 8D 00 00 32 1F 8D
    00 01 70 08 11 6D 00 8D 00 01 7A 08 00 0A 00 00
    00 00 00 00 00 00 00 00 05 00 2A 00 0A 06 80 08
    10 06 80 07 01 06 00 00 01 03 80 03 02 06 80 03
    00 03 80 0A 06 03 80 0A 01 03 80 03 03 03 80 0A
    08 01 00 02 00 09 00 17 00 00 00 13 05 06 04 0A
    07 07 25 09 06 09 06 09 08 05 06 05 06 05 08 00
<= 00 90 00
Install For Install
cm> install -i 111111111111 -q C9#() 1111111111 111111111111
=> 80 E6 0C 00 1A 05 11 11 11 11 11 06 11 11 11 11
    11 11 06 11 11 11 11 11 11 01 00 02 C9 00 00 00
<= 90 00Note that if you want to use APDU manually, you should do the authenticate process and loading all blocks of the CAP file yourself.
Note that this is the APDU for a real card that is executed in JCOP Environment. I think it should work for the simulators too except the authentication commands.

Using JCOP tools under Linux

Hello.
I looked through the older web sites of IBM regarding the usage of JCOP tools under Linux.
I am interested in following questions:
1. Is there any separate distributon version of JCOP tools for Linux?
2. Can sample JCOP tools 3.1.2 plugin (for Windows) be used under Linux. What has to be modified? Also what additional tools have to be installed an used for communication with real cards through PC/SC readers.
3. Is JCOP simulation option available under Linux?
I'll appreciate any help.
Best regards,
newbie

newbie2007 wrote:Hello.
I looked through the older web sites of IBM regarding the usage of JCOP tools under Linux.
I am interested in following questions:
1. Is there any separate distributon version of JCOP tools for Linux?
2. Can sample JCOP tools 3.1.2 plugin (for Windows) be used under Linux. What has to be modified? Also what additional tools have to be installed an used for communication with real cards through PC/SC readers.
3. Is JCOP simulation option available under Linux?
I'll appreciate any help.
Best regards,
newbieEverything should work, except for the target pack and the non-existent Linux Pegoda driver.1. The is no seperate Linux distribution. You just need a Linux distribution for Eclipse.JCOP Tools plugin should work under Linux, except for the target pack and the non-existent Pegoda driver for Linux.1. There is no seperate Linux distribution. You just need the Linux distribution for Eclipse.
2. Prior to JCOP Tools 3.1.2 the last time something was mentioned about Linux was in the release notes of 3.1.1b . In version 3.2.0 IBM added a linux_support page to the JCOP Tools user guide (see release notes and linux_support page below).
3. There shouldn't be any problems with the generic simulation. The target pack runs only with Windows though.
h1. Release Notes
h2. Version
JCOP Tools 3.1.1.b (Bärlach)
h2. What's new?
h3. 3.1.1.b
<ul><li>New simulation (fixed static obj/arr bug, fixed instance field token bug).</li>
<li>Applet privileges can now be specified in the launch configuration dialog.</li>
<li>The "exportmap" feature is now available.</li>
<li>The JCOP Performance Test Demo ("JCOP Factor") is now included.</li>
<li>Minor bug fixes.</li>
</ul>
h2. Known problems
<ul><li>Simulations do not run (Linux, MacOS X)
     The Eclipse update manager does not set the execute permission bits for the simulations. You need to manually <code>chmod 755</code> those files in ECLIPSE/plugins/com.ibm.bluez.jcop.eclipse_3.1.1.x/simuls/
</li>
<li>PC/SC Support (Linux)
     JCOP Tools only works with pcsc-lite 1.2.0.
</li>
</ul>
h2. Frequently Asked Questions
Please refer to the online FAQ at http://www.zurich.ibm.com/jcop/download/eclipse/faq/.
h2. Bug Reports
Please send bug reports to [email protected]. Make sure you include the following:
<ul><li>Problem description</li>
<li>Steps to reproduce</li>
<li>Eclipse version and build number (Help > About)</li>
<li>JCOP Tools version (Help > About; click on BlueZ icon)</li>
</ul>
h2. Using JCOP Tools with Linux (>= 3.2.0)
h3. ___
Overview
The current JCOP Tools release now also offer a version for the popular Linux
operating system. Both the Windows and Linux verson provide more or less the same
functionality, and JCOP application development can thus fully succeed on Linux systems.
Nevertheless, installation of the JCOP Tools differ between Windows and Linux
where the Linux version does not provide a simple installer as in case of Windows.
Additionally, the Linux version expects a properly setup Muscle PCSC installation
as soon as you want to use them together with physical, real cards. As Muscle
PCSC is still not shipped with most Linux distributions, you must download and
install them separately from the JCOP Tools.
h3. ___
Contents
h3. ___
Software Requirements
Linux distribution
The JCOP Tools simulation has been developed on a Fedora Core 6 system, but should also work in case of
many other recent Linux distributions.
Java Development Kit
The JCOP Tools have been developed and tested with the Sun JDK 1.4.2_13-b06
for Linux. Your success with other Development Kits may vary as there are
partly subtle differences across the different devlopment kits.
PCSC
The JCOP Tools use PCSC to talk with real cards on Linux. Most distributions
do not ship with Linux PCSC by default (Fedora Core 6 does), you must thus download it fromhttp://www.linuxnet.com
and install it by yourself. If you are used to software installation under Linux,
and are not afraid of compiling and installing software packages, this should
not be a hard problem. You have to download both the base PCSC package
(including PCSC daemon and client libraries) and separately the driver
for the reader you want to use. The PCSC package contains a test program
which should tell you whether your installation is set up correctly and
communicating with a card works. The JCOP Tools have been reported to
work together with Muscle PCSC version 1.3.1-7.
JPCSC
The JCOP Tools are shipped with JPCSC which you can also download athttp://www.linuxnet.com. JPCSC
is a JNI library which offers Java applications the access to PC/SC functions
by mapping their requests to an underlying native PC/SC implementation. The JCOP
Tools - mostly written in Java - thus depend on JPCSC to communicate with real cards
on Linux. JPCSC depends on a properly installed and setup PC/SC environment.
Especially, the JAVA_LIBRARY_PATH should list the directories where the
PC/SC client libraries and the native JPCSC library libjpcsc.so ( downloadable as binary from
Windows Binary Download Here )
are installed, the CLASSPATH variable should list th___
Miscellaneous
What should work
As soon as you setup your system correctly, there should only be minor differences
between using JCOP Tools on Windows or on Linux. Emulating a real JCOP,
debugging, shell, cap-file conersion should all be possible as in case of Windows.
What is missing
No drivers or tools are currently available for using JCOP30's in contactless
mode. If you need such support, please contact directly NXP
at for further assistance.
Copyright 2001,2007 IBM Corp. All rights reserved.
Edited by: lexdabear on Sep 28, 2007 4:13 PM (I hate the new edit)

About card lock

Hi,
Somewhere in this forum I have found that if you failed to authenticate 10 times your cards gets locked. So my confusion is if I am doing INIT UPDATE (successfully) and than not ext auth for 10 times does it mean it failed in authentication.
And this number (10) if for life cycle of card of for 10 consecutive faillure will lock the card.

This is true for JCOP cards."if I am doing INIT UPDATE (successfully) and than not ext auth for 10 times does it mean it failed in authentication"
I want to ask that if I do INIT UPDATE (though successfully) but not ext-auth does it add it in its counter of failure attempt.

Debug Problem on Jcop Tools

Hello,
I have developed a Java Card Applet on Eclipse and I can run it through Jcop Tools' simulator. However, when I try to debug it, simulator returns 6A80 to upload command. Would you please tell me, what can be the reason of this problem?
Thanks in Advance,
Regards

Dear ankey21, thank you for your response. Restarting Eclipse could not solve the problem.
Here is apdu trace:
cm> upload -d -b 250 "D:\**.cap"
=> 80 E6 02 00 12 05 6D 79 61 70 70 08 A0 00 00 00    ......myapp.....
    03 00 00 00 00 00 00 00                            ........
(1556 usec)
<= 00 90 00                                           ...
Status: No Error
=> 80 E8 00 00 FA C4 83 01 1E D7 01 00 15 DE CA FF    ................
    ED 02 02 04 00 01 05 6D 79 61 70 70 05 6D 79 61    .......myapp.mya
    70 70 02 00 21 00 15 00 21 00 09 00 32 04 56 00    pp..!...!...2.V.
    55 4A 89 00 DD 0A 62 00 00 0C 5F B7 73 00 18 00    UJ....b..._.s...
    0B 00 B2 05 01 00 04 00 32 05 02 01 07 A0 00 00    ........2.......
    00 62 01 01 02 01 07 A0 00 00 00 62 02 01 02 01    .b.........b....
    07 A0 00 00 00 62 01 02 00 01 06 A0 00 00 01 51    .....b.........Q
    00 00 01 07 A0 00 00 00 62 00 01 03 00 09 01 05    ........b.......
    4D 79 41 70 70 04 09 06 00 55 00 00 80 00 80 03    MyApp....U......
    43 00 40 04 06 00 00 04 32 FF FF 04 1D 04 3C 32    [email protected].....<2
    E3 32 EE 00 84 00 07 00 07 01 02 00 08 47 4D 47    .2...........GMG
    72 46 56 46 66 46 95 46 D1 47 11 47 E1 47 F6 48    rFVFfF.F.G.G.G.H
    04 00 84 00 08 00 07 01 00 00 0A 49 6E 49 BA 49    ...........InI.I
    C4 49 D0 49 EB 4A 0C 4A 1B 4A 2D 4A 3F 4A 71 07    .I.I.J.J.J-J?Jq.
    4A 89 24 03 D3 80 1A 03 ED 00 00 04 25 80 04 04    J.$.........%...
    2B 00 AB 04 54 01 AE 06 04 00 64 04 54 01 AE 00    +...T.....d.T...
(864915 nsec)
<= 6A 80                                              j.
Status: Wrong data
jcshell: Error code: 6a80 (Wrong data)
jcshell: Wrong response APDU: 6A80
Unexpected error; aborting executionRegards,

On-card signature w/ ALG_RSA_CRT in JCOP 41 simulator?

Similar Messages

Maybe you are looking for