What is the best smartcard all around?

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

What is the best smartcard all around?

Jan Schermer
I need a new smartcard. I give up on Alladin eToken Pro 64K for now, but
I need to have something that can:

1) store many certificates (~6, each with it's own auth-id), that means
64KB probably
2) do RSA2048 in hardware
3) *just*work* :)

Any advice? I was looking for eGate + cryptoflex, but i'm not sure about
it being able to do RSA 2048bit, and it's very expensive

Thanks

--
Jan Schermer
Freelance UNIX Specialist

GSM: +420-608022225
email: [hidden email]
ICQ: 19466257
WWW: http://www.zviratko.net

CONFIDENTIALITY HAIKU:

This plaintext message
not alone in the network
notice for the lame


_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user

smime.p7s (3K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: What is the best smartcard all around?

Andreas Jellinghaus-2
On Tuesday 20 September 2005 03:59, Jan Schermer wrote:

> I need a new smartcard. I give up on Alladin eToken Pro 64K for now, but
> I need to have something that can:
>
> 1) store many certificates (~6, each with it's own auth-id), that means
> 64KB probably
> 2) do RSA2048 in hardware
> 3) *just*work* :)
>
> Any advice? I was looking for eGate + cryptoflex, but i'm not sure about
> it being able to do RSA 2048bit, and it's very expensive

hu? I wonder, the Aladdin eToken PRO is quoted at 50 euro, the 64 version
might be more expensive?

On the other hand the egate+cryptoflex is 30 us$ (but you need to buy it in
packs of five), so it is a lot cheaper.

Also it works great. I'm using it all the time, I know lots of people using
it, and no bigger problems so far.

Maybe one: buy a second egate token in advance. It is good to have a few
extra around, as they are not that robust and might break or bend after
a while. In __very__ heavy use I broke one per month. (read that as up
to hundred plugins per day.)

Also I had to notice the hard way: it is not a good idea to put it on
your normal (metal/heavy) keyring, and then leave it hanging at the
server - the wight of the keyring bends it and soon it won't work well
in all usb ports.

But I believe those issues are presend with all usb tokens, the aladdin
for example don't look very solid either, at least the ones I have the
usb connector part is getting loose. And I prefer replacing an 8us$
part with no keys lost, over replacing a 50$ part with all keys lost,
even if the former had to be replaced twice as often.

if you want a second alternative: rainbow ikey 3000 works great as well.

and I still hope to finish the starkey driver real soon now :)
(but can't give an ETA.)

Regards, Andreas
_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user
Reply | Threaded
Open this post in threaded view
|

Re: What is the best smartcard all around?

Jan Schermer
Yes, you are right, eToken PRO 64K costs about $66. But it's available here in .cz. I couldn't find anybody with stock of cryptoflex and if you add shipping costs from EU... + you have to order in packs of 5.
Every company i phone told me that they will be glad to provide me with egate+cryptoflex if I take 500+ pcs... ehm.. :)

Btw it there Cryptoflex 64K? I can't fit another cert. to a 32K iKey...

I already have iKey 3000, but it can't do 2048bit RSA = unusable for me :(

Thanks
Jan

Andreas Jellinghaus wrote:
On Tuesday 20 September 2005 03:59, Jan Schermer wrote:
  
I need a new smartcard. I give up on Alladin eToken Pro 64K for now, but 
I need to have something that can:

1) store many certificates (~6, each with it's own auth-id), that means 
64KB probably
2) do RSA2048 in hardware
3) *just*work* :)

Any advice? I was looking for eGate + cryptoflex, but i'm not sure about 
it being able to do RSA 2048bit, and it's very expensive
    

hu? I wonder, the Aladdin eToken PRO is quoted at 50 euro, the 64 version
might be more expensive?

On the other hand the egate+cryptoflex is 30 us$ (but you need to buy it in
packs of five), so it is a lot cheaper.

Also it works great. I'm using it all the time, I know lots of people using
it, and no bigger problems so far.

Maybe one: buy a second egate token in advance. It is good to have a few
extra around, as they are not that robust and might break or bend after
a while. In __very__ heavy use I broke one per month. (read that as up
to hundred plugins per day.)

Also I had to notice the hard way: it is not a good idea to put it on
your normal (metal/heavy) keyring, and then leave it hanging at the
server - the wight of the keyring bends it and soon it won't work well
in all usb ports.

But I believe those issues are presend with all usb tokens, the aladdin
for example don't look very solid either, at least the ones I have the
usb connector part is getting loose. And I prefer replacing an 8us$
part with no keys lost, over replacing a 50$ part with all keys lost,
even if the former had to be replaced twice as often.

if you want a second alternative: rainbow ikey 3000 works great as well.

and I still hope to finish the starkey driver real soon now :)
(but can't give an ETA.)

Regards, Andreas
_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user
  

_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user
Reply | Threaded
Open this post in threaded view
|

Re: What is the best smartcard all around?

migfrade (Bugzilla)


Jan Schermer wrote:
> Yes, you are right, eToken PRO 64K costs about $66. But it's available
> here in .cz. I couldn't find anybody with stock of cryptoflex and if you
> add shipping costs from EU... + you have to order in packs of 5.
> Every company i phone told me that they will be glad to provide me with
> egate+cryptoflex if I take 500+ pcs... ehm.. :)

Hi,
I used this on-line shop: https://it-secure.dynalias.com/ to order one
cryptoflex 32K + e-gate, with all taxes and transportation at cost price
  43,25 € (without software) a bit expensive, but worthwhile if you just
want one card. The payment system is from the Switzerland post office
and was only available in german (I had to use babelfish). The order
took 2 weeks to arrive instead of the promised 2 to 4 days, but it did
arrived.



--
Miguel Frade
______________________________________
Free Digital Certificates
CAcert Assurer (http://www.cacert.org)

_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user

smime.p7s (4K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: What is the best smartcard all around?

Andreas Jellinghaus-2
In reply to this post by Jan Schermer
On Tuesday 20 September 2005 11:19, Jan Schermer wrote:
> Yes, you are right, eToken PRO 64K costs about $66. But it's available
> here in .cz. I couldn't find anybody with stock of cryptoflex and if you
> add shipping costs from EU... + you have to order in packs of 5.
> Every company i phone told me that they will be glad to provide me with
> egate+cryptoflex if I take 500+ pcs... ehm.. :)

what about directly ordering in usa? thas how I got my first tokens,
total price was still under 30 euro per piece. (I bought five, and
resold some of them to other users.)

also there is a swiss company selling them, even if you buy only one.
If necessary I will ask a friend what the name was ...

> Btw it there Cryptoflex 64K? I can't fit another cert. to a 32K iKey...
no, there is not, as far as I know.
a few certs and keys should fit into 64k. what are you putting into
your certiticates to make them so big? a cert shouldn't be bigger than
4kb, and a 2048 bit key would be 512 byte? so with all overhead 32kb
should be big enought for 5 big certificates and keys.

you can fine tune things if you edit the profile files.

> I already have iKey 3000, but it can't do 2048bit RSA = unusable for me :(

oops, yes, I remember. one more reason for me to finish the starkey
driver, I think it has the new starcos with 2048 bit keys, but need to check.

Regards, Andreas
_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user
Reply | Threaded
Open this post in threaded view
|

Re: What is the best smartcard all around?

Jan Schermer


Andreas Jellinghaus wrote:
On Tuesday 20 September 2005 11:19, Jan Schermer wrote:
  
Yes, you are right, eToken PRO 64K costs about $66. But it's available 
here in .cz. I couldn't find anybody with stock of cryptoflex and if you 
add shipping costs from EU... + you have to order in packs of 5.
Every company i phone told me that they will be glad to provide me with 
egate+cryptoflex if I take 500+ pcs... ehm.. :)
    

what about directly ordering in usa? thas how I got my first tokens,
total price was still under 30 euro per piece. (I bought five, and
resold some of them to other users.)

also there is a swiss company selling them, even if you buy only one.
If necessary I will ask a friend what the name was ...

  
don't worry,  i found a local distributor willing to sell 1 piece :) finally...

  
Btw it there Cryptoflex 64K? I can't fit another cert. to a 32K iKey...
    
no, there is not, as far as I know.
a few certs and keys should fit into 64k. what are you putting into
your certiticates to make them so big? a cert shouldn't be bigger than
4kb, and a 2048 bit key would be 512 byte? so with all overhead 32kb
should be big enought for 5 big certificates and keys.

you can fine tune things if you edit the profile files.

  
I already did, but I currently have 5 auth-ids + 5 certs and I need to add 6th.

  
I already have iKey 3000, but it can't do 2048bit RSA = unusable for me :(
    

oops, yes, I remember. one more reason for me to finish the starkey
driver, I think it has the new starcos with 2048 bit keys, but need to check.

  
and what cards use starcos? :)

Thanks
Jan

_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user
Reply | Threaded
Open this post in threaded view
|

Re: What is the best smartcard all around?

Andreas Jellinghaus-2
On Tuesday 20 September 2005 15:52, Jan Schermer wrote:
> and what cards use starcos? :)

ikey 3000, starkey, starcos smart cards.

Andreas
_______________________________________________
opensc-user mailing list
[hidden email]
http://www.opensc.org/cgi-bin/mailman/listinfo/opensc-user