Online ATR parsing

[Ludovic Rousseau]

Hello,

Just for the fun I wrote a Google app engine application. The
application is simply an ATR parsing.
It is available at [1]. The parsing source code is available at [2].

The web page design can be improved a lot. Suggestions are welcome.

The next idea is to add the possibility to register unknown ATR online.

Regards,

[1] http://smartcard-atr.appspot.com/
[2] http://pyscard.svn.sourceforge.net/viewvc/pyscard/trunk/contrib/parseATR/

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Martin Paljak-2]

Hi,

On 04.10.2009, at 14:37, Ludovic Rousseau wrote:
> The web page design can be improved a lot. Suggestions are welcome.
  - it requires a Google logon, why?
  - after I logged on, /parse was a blank page. Re-entering the ATR  
worked after a refresh
  - it could also use smartcard_list.txt to display more info about  
the ATR/card.

Cool!

--
Martin Paljak
http://martin.paljak.pri.ee
+372.515.6495




_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Ludovic Rousseau]

2009/10/4 Martin Paljak <martin@...>:
> Hi,
>
> On 04.10.2009, at 14:37, Ludovic Rousseau wrote:
>>
>> The web page design can be improved a lot. Suggestions are welcome.
>
>  - it requires a Google logon, why?

Because the code is based on the sample. Now removed.
I plan to use registering when submitting a unknown ATR.

>  - after I logged on, /parse was a blank page. Re-entering the ATR worked
> after a refresh

Should be corrected either.

>  - it could also use smartcard_list.txt to display more info about the
> ATR/card.

Done (without regular expression for now).

> Cool!

Thanks :-)

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Martin Paljak-2]

On 04.10.2009, at 16:30, Ludovic Rousseau wrote:
>>  - it could also use smartcard_list.txt to display more info about  
>> the
>> ATR/card.
>
> Done (without regular expression for now).
Don't know if it requires regexps or not but Estonian eID ATR 3b:5e:
11:ff:45:73:74:45:49:44:20:76:65:72:20:31:2e:30 is not identified.

Maybe keep the input bar on the parse page as well, so that a new ATR  
could be entered at once. Also, it would be better if the input field  
was just a looong single line, from left side to right side of the  
browser window.

--
Martin Paljak
http://martin.paljak.pri.ee
+372.515.6495




_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Anders Rundgren]

I don't know what the purpose is with Online ATR parsing.  Is it
about finding out the card's identity and type?

I'm personally skeptical about using non-secured information obtained
over the Internet for security-related tasks which is the reason why I
began plotting with device certificates instead of ATR strings.
Device certificates (and associated private keys) do not only identify the
container but also vouch for that generated keys really were generated
in the card and not in software.

Anders
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Ludovic Rousseau]

2009/10/4 Martin Paljak <martin@...>:
> On 04.10.2009, at 16:30, Ludovic Rousseau wrote:
>>>
>>>  - it could also use smartcard_list.txt to display more info about the
>>> ATR/card.
>>
>> Done (without regular expression for now).
>
> Don't know if it requires regexps or not but Estonian eID ATR
> 3b:5e:11:ff:45:73:74:45:49:44:20:76:65:72:20:31:2e:30 is not identified.

This card was not in my list. Corrected.

> Maybe keep the input bar on the parse page as well, so that a new ATR could
> be entered at once. Also, it would be better if the input field was just a
> looong single line, from left side to right side of the browser window.

I am now using:
          <form action="/parse" method="post">
            <div><textarea name="content" rows="1" cols="100"></textarea></div>
            <div><input type="submit" value="Parse ATR"></div>
          </form>

Patches welcome :-)

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Ludovic Rousseau]

2009/10/4 Anders Rundgren <anders.rundgren@...>:
> I don't know what the purpose is with Online ATR parsing.  Is it
> about finding out the card's identity and type?

Yes. And also for knowing what information is contained in the ATR.
If you don't see the purpose of parsing an ATR maybe you don't need
this service.

> I'm personally skeptical about using non-secured information obtained
> over the Internet for security-related tasks which is the reason why I
> began plotting with device certificates instead of ATR strings.

An ATR is not secret. All the cards of the same type have the same ATR.

> Device certificates (and associated private keys) do not only identify the
> container but also vouch for that generated keys really were generated
> in the card and not in software.

In general they are "user" certificates, not "device". But that is a
completely different problem.

Bye

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Martin Paljak-2]

On 04.10.2009, at 17:51, Ludovic Rousseau wrote:

> 2009/10/4 Martin Paljak <martin@...>:
>> On 04.10.2009, at 16:30, Ludovic Rousseau wrote:
>>>>
>>>>  - it could also use smartcard_list.txt to display more info  
>>>> about the
>>>> ATR/card.
>>>
>>> Done (without regular expression for now).
>>
>> Don't know if it requires regexps or not but Estonian eID ATR
>> 3b:5e:11:ff:45:73:74:45:49:44:20:76:65:72:20:31:2e:30 is not  
>> identified.
>
> This card was not in my list. Corrected.

Strange, I thought I have sent all ATR-s used by EstEID, but  
apparently I was wrong :) Probably because of cold/warm ATR  
difference...

>> Maybe keep the input bar on the parse page as well, so that a new  
>> ATR could
>> be entered at once. Also, it would be better if the input field was  
>> just a
>> looong single line, from left side to right side of the browser  
>> window.
>
> I am now using:
>          <form action="/parse" method="post">
>            <div><textarea name="content" rows="1" cols="100"></
> textarea></div>
>            <div><input type="submit" value="Parse ATR"></div>
>          </form>
>
> Patches welcome :-)

  <form action="/parse" method="post">
             <div><input type="text" name="content" size="100"></div>
             <div><input type="submit" value="Parse ATR"></div>
           </form>

This way pressing return in the ATR field submits the ATR instead of  
generating a newline inside the textarea.

It would be useful to also list all cards in smartcard_list.txt and  
maybe even be able to browse them by some characteristics, like http://pcsclite.alioth.debian.org/section.html 
. At least a listing of all ATR-s with a link to parse page would be  
useful.


--
Martin Paljak
http://martin.paljak.pri.ee
+372.515.6495




_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Ludovic Rousseau]

2009/10/25 Martin Paljak <martin@...>:

>
> On 04.10.2009, at 17:51, Ludovic Rousseau wrote:
>
>> 2009/10/4 Martin Paljak <martin@...>:
>>>
>>> On 04.10.2009, at 16:30, Ludovic Rousseau wrote:
>>>>>
>>>>>  - it could also use smartcard_list.txt to display more info about the
>>>>> ATR/card.
>>>>
>>>> Done (without regular expression for now).
>>>
>>> Don't know if it requires regexps or not but Estonian eID ATR
>>> 3b:5e:11:ff:45:73:74:45:49:44:20:76:65:72:20:31:2e:30 is not identified.
>>
>> This card was not in my list. Corrected.
>
> Strange, I thought I have sent all ATR-s used by EstEID, but apparently I
> was wrong :) Probably because of cold/warm ATR difference...

The complete list is available at
http://ludovic.rousseau.free.fr/softwares/pcsc-tools/smartcard_list.txt

>>> Maybe keep the input bar on the parse page as well, so that a new ATR
>>> could
>>> be entered at once. Also, it would be better if the input field was just
>>> a
>>> looong single line, from left side to right side of the browser window.
>>
>> I am now using:
>>         <form action="/parse" method="post">
>>           <div><textarea name="content" rows="1"
>> cols="100"></textarea></div>
>>           <div><input type="submit" value="Parse ATR"></div>
>>         </form>
>>
>> Patches welcome :-)
>
>  <form action="/parse" method="post">
>            <div><input type="text" name="content" size="100"></div>
>            <div><input type="submit" value="Parse ATR"></div>
>          </form>
>
> This way pressing return in the ATR field submits the ATR instead of
> generating a newline inside the textarea.

Thanks. I will try that.

> It would be useful to also list all cards in smartcard_list.txt and maybe
> even be able to browse them by some characteristics, like
> http://pcsclite.alioth.debian.org/section.html. At least a listing of all
> ATR-s with a link to parse page would be useful.

The complete list is available online.

It would be nice to submit an ATR parse with only one URL (by putting
the ATR in the URL for example). So creating a web page with all the
ATRs and links to the parsed version would be easy.
But you could not easily "grep" the parsed ATRs in this case.

I already have more than 800 ATRs in the list.
What characteristics do you think would be interesting?
- T=0, T=1, both support
- speed (TA1)

Thanks

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Ludovic Rousseau]

The ATR parsing web app is still available at http://smartcard-atr.appspot.com/

2009/10/25 Martin Paljak <martin@...>:
>  <form action="/parse" method="post">
>            <div><input type="text" name="content" size="100"></div>
>            <div><input type="submit" value="Parse ATR"></div>
>          </form>
>
> This way pressing return in the ATR field submits the ATR instead of
> generating a newline inside the textarea.

Done.

> It would be useful to also list all cards in smartcard_list.txt and maybe
> even be able to browse them by some characteristics, like
> http://pcsclite.alioth.debian.org/section.html. At least a listing of all
> ATR-s with a link to parse page would be useful.

For now I only add a link to the list in text.

Thanks

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[Ludovic Rousseau]

2009/10/26 Ludovic Rousseau <ludovic.rousseau@...>:
> It would be nice to submit an ATR parse with only one URL (by putting
> the ATR in the URL for example). So creating a web page with all the
> ATRs and links to the parsed version would be easy.
> But you could not easily "grep" the parsed ATRs in this case.

It is now possible to give the ATR value in the URL like
http://smartcard-atr.appspot.com/parse?ATR=3B%2002%2014%2050

I could not find an OpenSC wiki page with an ATR value in it. But I
have not search for long. If you know one please let me know.

Bye

--
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@...
http://www.opensc-project.org/mailman/listinfo/opensc-devel