xqp / opensc

smart card middleware (PKCS#11, Minidriver, Tokend) with extended support for contactless cards

OpenSC for Contact-Less Smart Cards

This is a fork of OpenSC/OpenSC that includes some features usefull for communication with contact-less smart cards. The extended features include:

• Smart Card Support:
  • Support German ID card:
    • Use eSign for electronic signature (PKCS#11, Minidriver, Tokend)
    • Use PIN management tool for electronic identification (eID)
  • Smartcard-HSM:
    • Use Manufacturer PKI for verifying the card and establishing SM
    • Support for Bundesdruckerei System-on-Card architecture
    • Support for recovering the authentication status by verifying a session PIN
• Secure On-Card-Authentication:
  • Fingerprint verification on-card
  • PIN verification on-card
• Generic features for easier integration of new cards:
  • Generic Secure Messaging encoding according to ISO 7816-8
  • Secure Messaging establishment with Extended Access Control (EAC):
    • Password Authenticated Connection Establishment (PACE)
    • Terminal Authentication (TA)
    • Chip Authentication (CA)
  • Support for Session PIN generation according to Smart Card Minidriver Specification, v7.07

Most of the above features are still open for integration into OpenSC (OpenSC/OpenSC#831). Since review cycles are long and the incentive of the project owner for integration is low, I don't expect to see them to be adopted very soon.