Extended APDU cardsCards can declare support of extended APDU in the historical bytes part of the ATR. Using my ATR parsing program it is visible as: Extended Lc and Le fields
Cards foundI used my stress test program to scan the complete ATR list. I found 5 cards with expicit extended APDU support:
- ePerso - German ID card
- SignTrust (www.signtrust.de) or Infinion SLE66CX680PE with Starcos 3.2
- Serbian Identity Card
- TCOS 3.0 / NetKey 3.0
- GnuPG card V2
Not all the cards declare extended APDU support in the ATR. So the list above is not exhaustive.
CommentsThe 5 cards do all support the T=1 protocol. The German ID card does also support T=0. This is because extended APDU is very hard to use using T=0.
The 5 cards are used for asymmetric cryptography (RSA) with "long" keys (2048 bits or 256 bytes) and so require the use of extended APDU.