Digital Signature with SmartCard

Digital Signature with SmartCard

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Digital Signature with SmartCard Nicolas Macarez 10-20-2007
Posted by Nicolas Macarez on October 21, 2007, 4:55 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Stefan, Paul,
I guess ALOAHA is what I am looking for.
I'll try the Aloaha Smart Card Connector as soon as I am back at my client
office.
So it would be fine to sign PDF files.
But I am not sure the financial firm I am trying to send the file to is
ready to handle the PDF format instead of TXT format.

So my last question is: is there a way to sign TXT files?

Regards
Nicolas

1qfz3qa7j9swr$.1buvif5dk909r.dlg@40tude.net...
> On Sat, 20 Oct 2007 11:21:24 +0200, Stefan Engelbert wrote:
>
>> Hi,
>>
>> which card are you using? Cards are like little computers with RAM, ROM,
>> Processor and Operating System. The extra Software you need is kind of a
>> driver (CSP, PKCS11). Usually they are supplied/sold by the card issuer.
>
> It isn't really clear here whether the problem is that the OP can't see
> the
> card or if the OP only needs software that will allow him to sign a text
> file. For example, you can't sign text files if you're using Notepad.
>
>>
>>> Hi
>>> I have a smartcard reader (Omnikey USB device) set up on a Windows XP
>>> desktop. I also have a card with a certificate issued by a financial
>>> firm;
>>> I need to send TEXT files to that firm using this card.
>>>
>>> The idea is to send the TEXT files stamped with a digital signature (no
>>> encryption required) to that firm, the smartcard certificate being the
>>> signature.
>>>
>>> I guess I need an extra software to apply the signature on the TEXT
>>> file,
>>> but can't figure which one. I am ready to pay for it, of course.
>>>
>>> Any idea?
>>>
>>> Help appreciated
>>> Nicolas
>>>
>>>
>
>
> --
> Paul Adare
> MVP - Virtual Machines
> http://www.identit.ca
> BPI: A 1960s term used to describe unmentionable parts of the anatomy, as
> in
> "you bet your bpi".



Posted by Eugene Mayevski on October 21, 2007, 5:03 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello!
You wrote on Sun, 21 Oct 2007 10:55:06 +0200:

NM> So my last question is: is there a way to sign TXT files?

You can sign the text file using detached PKCS#7 signature. This way the
signature will be stored in a separate file.

Alternatively you can sign the file as if it were a binary file. The
signature will be enveloping in this case, i.e. the signed file won't be the
text file anymore. Validation of the signature will let you extract the
original text.

In both cases you would need to have a software that verifies the given file
and it's signature. And this software must be installed on the recipient's
side.


With best regards,
Eugene Mayevski
http://www.SecureBlackbox.com - the comprehensive component suite for
network security


Posted by Nicolas Macarez on October 21, 2007, 5:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks Eugene,
What software do I use in that case, since it appears that the standard way
is to sign files in PDF or XML format.
For example, is your SecureBlackBox software able to sign a TXT file?
Help appreciated.
Nicolas


%23KOaMF8EIHA.3548@TK2MSFTNGP06.phx.gbl...
> Hello!
> You wrote on Sun, 21 Oct 2007 10:55:06 +0200:
>
> NM> So my last question is: is there a way to sign TXT files?
>
> You can sign the text file using detached PKCS#7 signature. This way the
> signature will be stored in a separate file.
>
> Alternatively you can sign the file as if it were a binary file. The
> signature will be enveloping in this case, i.e. the signed file won't be
> the text file anymore. Validation of the signature will let you extract
> the original text.
>
> In both cases you would need to have a software that verifies the given
> file and it's signature. And this software must be installed on the
> recipient's side.
>
>
> With best regards,
> Eugene Mayevski
> http://www.SecureBlackbox.com - the comprehensive component suite for
> network security



Posted by Eugene Mayevski on October 21, 2007, 4:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello!
You wrote on Sun, 21 Oct 2007 11:15:05 +0200:

NM> What software do I use in that case, since it appears that the standard
way
NM> is to sign files in PDF or XML format.
NM> For example, is your SecureBlackBox software able to sign a TXT file?

SecureBlackbox is a component suite for developers, not for end-users. If
you plan or can create your own application, - you are welcome. With
PKIBlackbox you will do what you need easily.

As for the end-user solutions, -- for enveloping signatures you can use our
Crypto4 Files (http://www.eldos.com/c4/c4files). But it doesn't offer
detached signature option.

With best regards,
Eugene Mayevski
http://www.SecureBlackbox.com - the comprehensive component suite for
network security


Posted by Stefan Engelbert on October 21, 2007, 7:53 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Most CSPs are shell integrated and allow to create a detached and an
enveloped PKCS7 signature with just a right mouse click. To sign PDF
documents you usually need an extra application.

Stefan

> So my last question is: is there a way to sign TXT files?
>


Similar ThreadsPosted
Digital Signature and Private Key September 3, 2006, 12:23 pm
Digital Signature and Private Key September 7, 2006, 11:28 am
Digital Signature and Private Key September 7, 2006, 11:33 am
Digital Signature and Private Key September 7, 2006, 9:45 pm
Invalid Digital Signature in Certificate July 7, 2006, 11:35 am
Digital Certificate "There are problems with the signature" September 5, 2006, 9:35 am
How to remove the digital signature of a .exe file? November 17, 2007, 6:16 am
Windows Mobile 5 email encryption and digital signature October 9, 2007, 12:53 pm
Error Signature January 8, 2007, 8:46 pm
How to detect the signature of a file September 2, 2008, 8:29 am

The site map in XML format XML site map

Contact Us | Privacy Policy