JCAlgTest: Robust identification metadata for certified smartcards

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F22%3A00127469" target="_blank" >RIV/00216224:14330/22:00127469 - isvavai.cz</a>

Result on the web

<a href="https://crocs.fi.muni.cz/papers/jcalgtest_secrypt22" target="_blank" >https://crocs.fi.muni.cz/papers/jcalgtest_secrypt22</a>

DOI - Digital Object Identifier

—

Result language

angličtina

Original language name

JCAlgTest: Robust identification metadata for certified smartcards

Original language description

The certification of cryptographic smartcards under the Common Criteria or NIST FIPS140-2 is a well-established process, during which an evaluation facility validates the manufacturer's claims and issues a product certificate. The tested card is usually identified by its name, type, ATR, and Card Production Life Cycle (CPLC) data. While sufficient to pair the purchased card to its original certificate when bought from a trustworthy seller, such static metadata stored on the card can easily be manipulated. We extend the currently used card identification with a more descriptive set of metadata extracted from supported functionality, performance profiling, and properties of generated cryptographic keys. All of this information can be obtained directly by the evaluation facility, appended to the certificate, and later verified by the end-user with no need for any special knowledge or equipment, resulting in a better assurance about the purchased product. We developed a suite of open tools for the extraction of such characteristics and collected results for a set of more than 100 different smartcards. The database, openly available, demonstrates the significant variability in the measured properties and allows us to estimate the trends in support of different cryptographic algorithms as provided by the JavaCard platform.

Czech name

—

Czech description

—

Type

D - Article in proceedings

CEP classification

—

OECD FORD branch

10200 - Computer and information sciences

Project

<a href="/en/project/VJ02010010" target="_blank" >VJ02010010: Tools for AI-enhanced Security Verification of Cryptographic Devices</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)<br>S - Specificky vyzkum na vysokych skolach

Publication year

2022

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection

Proceedings of the 19th International Conference on Security and Cryptography (SECRYPT 2022)

ISBN

9789897585906

ISSN

2184-7711

e-ISSN

—

Number of pages

8

Pages from-to

597-604

Publisher name

INSTICC

Place of publication

Portugal

Event location

Lisabon

Event date

Jan 1, 2022

Type of event by nationality

WRD - Celosvětová akce

UT code for WoS article

000853004900065