Important!

Blog moved to https://blog.apdu.fr/

I moved my blog from https://ludovicrousseau.blogspot.com/ to https://blog.apdu.fr/ . Why? I wanted to move away from Blogger (owne...

Friday, April 26, 2013

Associated Google+ page

Some days ago I disabled the comments on this blog for reasons I explained in "Comments are now disabled".

I will now try something else/new to allow comments on blog articles: a Google+ page.

The same rules apply:
  • Please, do only post comments related to the related article.
  • For general questions or bug reports, subscribe to and use the muscle mailing list.

Thursday, April 25, 2013

CCID descriptor statistics: idVendor

Article from the serie "CCID descriptor statistics"

The idVendor field is a text field from the USB descriptor: Vendor ID (assigned by the USB-IF)

As always the "#" column indicate the number of readers with the given idVendor. For example 28 readers have the same idVendor 0x04E6 (now Gemalto).

idVendor#%
0x04E62811.02 %
0x08E6259.84 %
0x076B145.51 %
0x0D46135.12 %
0x1A44114.33 %
0x072F103.94 %
0x1C34103.94 %
0x03EB83.15 %
0x046A72.76 %
0x073D62.36 %
0x078362.36 %
0x240662.36 %
0x058F51.97 %
0x0A5C51.97 %
0x0A8951.97 %
0x25DD51.97 %
0x03F041.57 %
0x0B8141.57 %
0x0F1441.57 %
0x1E0D41.57 %
0x096E31.18 %
0x098231.18 %
0x09C331.18 %
0x0BDA31.18 %
0x0BF831.18 %
0x0DC331.18 %
0x105931.18 %
0x079B20.79 %
0x08C320.79 %
0x0B0C20.79 %
0x0B9720.79 %
0x0C4B20.79 %
0x105020.79 %
0x15CF20.79 %
0x1A7420.79 %
0x23A020.79 %
0x413C20.79 %
0xA62520.79 %
0x041610.39 %
0x047110.39 %
0x048310.39 %
0x04B910.39 %
0x04CC10.39 %
0x04DA10.39 %
0x04E810.39 %
0x052910.39 %
0x08AE10.39 %
0x097310.39 %
0x09BE10.39 %
0x0DF610.39 %
0x0E0F10.39 %
0x0F1A10.39 %
0x120610.39 %
0x14DD10.39 %
0x15E110.39 %
0x167710.39 %
0x17EF10.39 %
0x186210.39 %
0x19A610.39 %
0x19C810.39 %
0x19E710.39 %
0x1B0E10.39 %
0x1CF010.39 %
0x1FC910.39 %
0x1FD310.39 %
0x20A010.39 %
0x234B10.39 %
0x24A210.39 %
0x882910.39 %


We have only 69 different idVendor but we had 86 different iManufacturer (see the previous article CCID descriptor statistics: iManufacturer). So the same idVendor is used for different iManufacturer.

As I wrote the in previous blog article the same chip from a "major" smart card reader manufacturer is also used (sold) under unother manufacturer name.

Here is a list of the 69 different idVendor and the iManufacturer used with the given idVendor.

idVendor#iManufacturer(s)
0x04E64Identive, Axalto, SCM Microsystems Inc., NTT Communications Corp.
0x076B4XIRING, Precise Biometrics, OMNIKEY AG, OMNIKEY
0x03F03SCM Microsystems Inc., Hewlett Packard, Hewlett-Packard Company
0x08E63Gemalto, Gemplus, Verisign
0x0BDA3Generic, Dectel, MSI
0x058F2Alcor Micro, Akasa
0x096E2Feitian Technologies, Feitian
0x09C32ActivIdentity, ActivCard
0x0A892Aktiv, Aktiv Co., ProgramPark
0x0B812Secure Device Solutions, id3 Semiconductors
0x0BF82Fujitsu Siemens Computers, FujitsuTechnologySolutions GmbH
0x0D462KOBIL Systems, KOBIL
0x1A742OCS ID-One Cosmo Card, OBERTHUR TECHNOLOGIES
0xA6252Tianyu, TianYu CCID Key
0x03EB1ATMEL
0x04161Winbond
0x046A1Cherry GmbH
0x04711Philips Semiconductors
0x04831Kingtrust
0x04B91Philips Semiconductors
0x04CC1KEBTechnology
0x04DA1Panasonic
0x04E81Softforum Co., Ltd
0x05291Aladdin
0x072F1ACS
0x073D1Eutron
0x07831C3PO
0x079B1Morpho
0x08AE1Macally
0x08C31Precise Biometrics
0x09731SchlumbergerSema
0x09821COVADIS
0x09BE1MYSMART
0x0A5C1Broadcom Corp
0x0B0C1Todos
0x0B971O2
0x0C4B1REINER SCT
0x0DC31Athena
0x0DF61Sitecom
0x0E0F1VMware
0x0F141XIRING
0x0F1A1GIS Ltd
0x10501Yubico
0x10591Giesecke & Devrient GmbH
0x12061SYNNIX
0x14DD1Raritan
0x15CF1Avtor
0x15E11RSA
0x16771HDZB
0x17EF1Lenovo
0x18621Teridian Semiconductors
0x19A61ubisys
0x19C81GoldKey Security
0x19E71charismathics
0x1A441VASCO
0x1B0E1BLUTRONICS
0x1C341SpringCard
0x1CF01Validy
0x1E0D1Neowave
0x1FC91NXP
0x1FD31ASK-RFID
0x20A01German Privacy Foundation
0x234B1Free Software Initiative of Japan
0x23A01BIFIT
0x24061Inside Secure
0x24A21SafeTech
0x25DD1Bit4id
0x413C1Dell
0x88291CCB

Comments


Renaming


Some manufacturer have changed their names:
  • Gemplus has been renamed to Gemalto
  • SCM has been renamed to Identive

Rewording


Some manufacturer uses different wording for the same name:
  • Feitian Technologies, Feitian
  • ActivIdentity, ActivCard
  • Fujitsu Siemens Computers, FujitsuTechnologySolutions GmbH
  • KOBIL Systems, KOBIL
  • OCS ID-One Cosmo Card, OBERTHUR TECHNOLOGIES
  • Tianyu, TianYu CCID Key

Licencing


Some manufacturers sell their technology to others:
  • SCM (now Identive) sell to Axalto and NTT Communications Corp.
  • OMNIKEY AG sell to XIRING and Precise Biometrics
  • Gemplus (now Gemalto) sell to Verisign
  • Hewlett Packard sell to SCM
  • Realtek Semiconductor Corp. (0x0bda) sell to Generic, Dectel and MSI
  • id3 Semiconductors sell to Secure Device Solutions

Other


Some manufacturer (and associated idVendor) have a complex history:
  • SchlumbergerSema (0x0973) has been renamed Axalto (0x04E6) and then Gemalto (0x08E6)

Saturday, April 20, 2013

CCID descriptor statistics: iManufacturer

Article from the serie "CCID descriptor statistics"

The iManufacturer field is a text field from the USB descriptor: describing manufacturer

iManufacturer#%
Gemalto228.66 %
SCM Microsystems Inc.176.69 %
VASCO114.33 %
ACS103.94 %
Identive103.94 %
SpringCard103.94 %
KOBIL Systems93.54 %
ATMEL83.15 %
OMNIKEY AG83.15 %
Cherry GmbH72.76 %
C3PO62.36 %
Eutron62.36 %
Inside Secure62.36 %
Bit4id51.97 %
Broadcom Corp51.97 %
XIRING51.97 %
Aktiv41.57 %
Alcor Micro41.57 %
KOBIL41.57 %
Neowave41.57 %
OMNIKEY41.57 %
Athena31.18 %
COVADIS31.18 %
Giesecke & Devrient GmbH31.18 %
Precise Biometrics31.18 %
id3 Semiconductors31.18 %
ActivIdentity20.79 %
Avtor20.79 %
BIFIT20.79 %
Dell20.79 %
Feitian20.79 %
Fujitsu Siemens Computers20.79 %
Hewlett-Packard Company20.79 %
Morpho20.79 %
O220.79 %
Philips Semiconductors20.79 %
REINER SCT20.79 %
Todos20.79 %
Verisign20.79 %
Yubico20.79 %
ASK-RFID10.39 %
ActivCard10.39 %
Akasa10.39 %
Aktiv Co., ProgramPark10.39 %
Aladdin10.39 %
Axalto10.39 %
BLUTRONICS10.39 %
CCB10.39 %
Dectel10.39 %
Feitian Technologies10.39 %
Free Software Initiative of Japan10.39 %
FujitsuTechnologySolutions GmbH10.39 %
GIS Ltd10.39 %
Gemplus10.39 %
Generic10.39 %
German Privacy Foundation10.39 %
GoldKey Security10.39 %
HDZB10.39 %
Hewlett Packard10.39 %
KEBTechnology10.39 %
Kingtrust10.39 %
Lenovo10.39 %
MSI10.39 %
MYSMART10.39 %
Macally10.39 %
NTT Communications Corp.10.39 %
NXP10.39 %
OBERTHUR TECHNOLOGIES10.39 %
OCS ID-One Cosmo Card10.39 %
Panasonic10.39 %
RSA10.39 %
Raritan10.39 %
SYNNIX10.39 %
SafeTech10.39 %
SchlumbergerSema10.39 %
Secure Device Solutions10.39 %
Sitecom10.39 %
Softforum Co., Ltd10.39 %
Teridian Semiconductors10.39 %
TianYu CCID Key10.39 %
Tianyu10.39 %
VMware10.39 %
Validy10.39 %
Winbond10.39 %
charismathics10.39 %
ubisys10.39 %


A lot of readers are from different manufacturers. If you group the manufacturers by the number of readers they have produced we have:

# of reader per iManufacturer# of iManufacturer%
14653.49 %
21416.28 %
355.81 %
455.81 %
533.49 %
633.49 %
711.16 %
822.33 %
911.16 %
1033.49 %
1111.16 %
1711.16 %
2211.16 %


More than half (53%) of the readers are from a manufacturer that made only one CCID reader. 16% are from manufacturers with 2 readers.

My interpretation is that the reader chip has been designed by one of the major reader manufacturers and the reader chip has been sold to another manufacturer.

Wednesday, April 17, 2013

CCID descriptor statistics: section

Article from the serie "CCID descriptor statistics"

section#%
Should work readers17968.32 %
Supported readers5922.52 %
Unsupported readers166.11 %
Disabled readers83.05 %



Readers in the Disabled list are either completly bogus or the reader manufacturer requested me to remove them so they are supported by another CCID driver.

If we ignore the readers in the "disabled" list we have:



A large part of the readers (70%) have not been tested by me. It is not a problem if the reader is working correctly. It is more problematic if the reader is bogus. If a user reports a problem I can identify as a bug in the reader then the reader is moved in the "Unsupported list" with a note about the problem.

CCID descriptor statistics

The list of readers that do work with my CCID driver is now big enough (262 readers) to do some statistics.

I don't know how many CCID readers are available worldwide. I guess that with 262 of them I cover a large part of the market.

I do plan to do statistics with these different fields:

I will create a new blog article for each field and update the list above with links to the articles.

Tuesday, April 16, 2013

New version of libccid: 1.4.10

I just released a version 1.4.10 of libccid the free software CCID class smart card reader driver.

Changes:
1.4.10 - 16 April 2013, Ludovic Rousseau
  • Add support of
    • ACS APG8201 USB Reader with PID 0x8202
    • GIS Ltd SmartMouse USB
    • Gemalto IDBridge K3000
    • Identive CLOUD 2700 F Smart Card Reader
    • Identive CLOUD 2700 R Smart Card Reader
    • Identive CLOUD 4500 F Dual Interface Reader
    • Identive CLOUD 4510 F Contactless + SAM Reader
    • Identive CLOUD 4700 F Dual Interface Reader
    • Identive CLOUD 4710 F Contactless + SAM Reader
    • Inside Secure AT90SCR050
    • Inside Secure AT90SCR100
    • Inside Secure AT90SCR200
    • SCR3310-NTTCom USB SmartCard Reader
    • SafeTech SafeTouch
    • SpringCard H512 Series
    • SpringCard H663 Series
    • SpringCard NFC'Roll
    • Yubico Yubikey NEO CCID
    • Yubico Yubikey NEO OTP+CCID
  • Add support of time extension for Escape commands

Monday, April 1, 2013

New version of pcsc-perl: 1.4.13

I just released a new version 1.4.13 of pcsc-perl, the Perl wrapper for PC/SC.
This version just fixes a warning when you use Perl 5.16.

 

See the article "PCSC sample in Perl" for code sample of PC/SC in Perl.

pcsc-perl is also available at CPAN: pcsc-perl-1.4.13 with the online API documentation for Chipcard::PCSC and Chipcard::PCSC::Card.