Hacker GitHub

← All repos

philipWendland/IsoApplet

View on GitHub ↗ ★ 214 Java

A Java Card PKI Applet aiming to be ISO 7816 compliant

16 mentions on Hacker News by 2 people: 1 story, 15 comments · first 2016-03-18 · latest 2022-08-18

Mentions per year 16 mentions · busiest year 2016 (7)
20082026
AllStoriesComments NewestTopOldest
  1. …NFC which is basically Feitian K9 NFC, so it doesn't support -O resident. Back in 2016 I was using https://github.com/philipWendland/IsoApplet which uses https://en.wikipedia.org/wiki/PKCS_11 standard, but modern way is much smoother as…
    comment by xaduha · 2022-08-18 · in A sane SSH(1) key management example
  2. …pcsc-lite, ccid and get gp.jar from https://javacard.pro/globalplatform/ and read some pages from https://github.com/philipWendland/IsoApplet/wiki , it will get you started.
    comment by xaduha · 2021-05-19 · in Security keys are now supported for SSH Git operations
  3. …are just applets and not particularly suited for SSH use either. Proper applet for it is this one https://github.com/philipWendland/IsoApplet , if you can install it of course. Some get confused or have bad associations when hearing the…
    comment by xaduha · 2020-06-30 · in How to use FIDO2 USB keys with SSH
  4. …asked around, there were devices, standards and software for this kind of thing for a while e.g. https://github.com/philipWendland/IsoApplet
    comment by xaduha · 2020-06-30 · in How to use FIDO2 USB keys with SSH
  5. …it? Do latest Yubikey even allow installing applets? Why are you using PIV for this? I was using https://github.com/philipWendland/IsoApplet with OpenSC and smartcards since 2016, no issues.
    comment by xaduha · 2020-05-10 · in Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
  6. This is a crutch, backwards approach. Just use smart cards goddammit, that's what they were made for! https://github.com/philipWendland/IsoApplet/wiki
    comment by xaduha · 2019-04-20 · in Hardening SSH with 2FA
  7. …especially on Ebay, don't buy expensive stuff. Once you have them use these guides to install https://github.com/philipWendland/IsoApplet/wiki/Installatio... https://github.com/philipWendland/IsoApplet/wiki/Initializat...
    comment by xaduha · 2019-04-04 · in Using a Yubikey as smartcard for SSH public key authentication
  8. You can buy a smartcard reader, some blank javacards and install this https://github.com/philipWendland/IsoApplet , seamless enough. I've been using it for about 3 years now I think. Other stuff you can do with smartcards…
    comment by xaduha · 2019-04-03 · in Using a Yubikey as smartcard for SSH public key authentication
  9. …1. But cheap blank "Java" smartcards, more or less disposable 2. Install this applet on it https://github.com/philipWendland/IsoApplet 3. Works with OpenSC
    comment by xaduha · 2017-05-02 · in Show HN: Kryptonite – a new home for your SSH private key
  10. …without any trouble - the Yubico GPG applet runs on them happily, and we're using https://github.com/philipWendland/IsoApplet for PKCS#11 based signing.
    comment by mjg59 · 2016-11-24 · in Why I don't like smartcards, HSMs, YubiKeys, etc.
  11. https://github.com/philipWendland/IsoApplet + some blank java cards + card reader. Something about Yubico rubs me the wrong way.
    comment by xaduha · 2016-09-25 · in Ask HN: What are the best practises for using SSH keys?
  12. …you can compile to a .cap file and upload it to your own blank java card. I'm using this instead https://github.com/philipWendland/IsoApplet
    comment by xaduha · 2016-07-11 · in Decrypt/Extract NitroKey HSM RSA Private Keys
  13. …probably can be even cheaper in some circumstances/regions. If you support open source, then give https://github.com/philipWendland/IsoApplet a look instead. A separate cardreader also means that you can use several smartcards for various…
    comment by xaduha · 2016-05-17 · in Yubico: Secure Hardware vs. Open Source
  14. https://github.com/philipWendland/IsoApplet is a thing that you can load to your own blank Javacard. Come to think of it, you should be able to load ykneo-openpgp to your card also. https://developers.yubico.com/ykneo-openpgp/Releases/
    comment by xaduha · 2016-04-06 · in OpenPGP best practices
  15. People should use smartcards more. When stuff hits the fan you can just destroy it. https://github.com/philipWendland/IsoApplet
    comment by xaduha · 2016-04-03 · in British authorities demand encryption keys in case with “huge implications”