New PyKCS11 1.3.2 available

I just released a new version of PyKCS11, a Python wrapper above the PKCS#11 API.

See PyKCS11 introduction for more details about PyKCS11.

Changes:
1.3.2 - January 2016, Ludovic Rousseau

• Add wrappers for C_Verify, C_WrapKey, C_UnwrapKey
• PKCS#11 definitions: sync with Cryptoki version 2.30
• Generate CKM[CKM_VENDOR_DEFINED+x] values on the fly
• Fix use of a pinpad reader CKF_PROTECTED_AUTHENTICATION_PATH
• dumpit.py: lots of small fixes
• Setup call make to build pykcs11_wrap.cpp using SWIG
• Fix build on Windows
• Small bugs fixed

I also noticed that I forgot to blog about the previous version: 1.3.1

Changes:
1.3.1 - October 2015, Ludovic Rousseau

• PKCS#11 definitions: sync with Cryptoki version 2.30
• Add user type CK_CONTEXT_SPECIFIC
• Fixes #9, incorrect assignment of pParameter for CK_MECHANISMs.
• CKA_DERIVE is a CK_BBOOL and not byte array
• Add digest() and encrypt method to Session class
• Add samples:
• key-pair generation
• key-pair generation + certificate import
• printing public key modulus
• computing signature
• small bugs fixed

ATR statistics: ATR list growth

Article from the series "ATR statistics"

Evolution of the number of ATRs

Since 2002 I add new ATRs in the ATR list, ATRs submitted by users of my tools: ATR_analysis and Smart card ATR parsing. I wanted to know how regularly I did that over the lifetime of the project (more than 14 years now).

I now have 2098 ATR entries in my list.

Graph

I am really surprised by the linearity of the curve.

The curve does not start at 0 ATR because the first versions of the list were stored in CVS Version Control System (I then used Subversion and now GIT). It looks like I lost the CVS history when I moved to Subversion in 2009.




The linear correlation equation is (according to Numbers): y = 6.308e-6 x - 940.4
That is a progression of 6.308x10^-6 ATR per second, or 0.54 ATR per day, or 3.8 ATR per week, or 199 ATR per year.

The coefficient of determination R² is equal to 0.996 (very close to 1) so the linear approximation is quiet good.

Conclusion

The progression may stay constant as new smart cards, with new ATRs, are continuously delivered to users by smart card providers.

Maybe this data is a good indication of the health of the smart card industry? What do you think?

ATR list study

Since 2002 I maintain a list of ATR (Answer-to-Reset). The idea is to identify a smart card given its ATR.

The project started as a Perl script (ATR_analysis from the pcsc-tools project), then moved into a Python script (parseATR.py from parseATR sub-project of pyscard-contrib) and is now a online web application: Smart card ATR parsing.

I now have 2098 ATRs in my list and I think it is time to make some statistics.

Articles

This article is a meta article (as I did with "CCID descriptor statistics") and contains only pointers to other articles:

• ATR list growth
• TS - Initial character
• T0 - Format byte
• TA1 - Global, encodes Fi and Di
• TB1 - Global, deprecated
• TC1 - Global, encodes N
• TD1 - Structural, encodes Y2 and T
• TA2 - Global, specific mode byte
• TB2 - Global, deprecated
• TC2 - Specific to T=0
• TD2 - Structural, encodes Y3 and T
• TA3 - Specific to T after T from 0 to 14 in TDi–1
• TB3 - Global after T=15 in TDi–1
• TC3
• TD3 - Structural, encodes Y4 and T
• TA4
• TB4 - Global after T=15 in TDi–1
• TC4
• Historical bytes - Historical bytes (optional)
• TCK - Check byte TCK (conditional)

Documentation

You can read the Wikipedia pages about Answer-to-Reset and ISO 7816.

Or you can pay 178 CHF (162 €) to buy and read the ISO 7816-3 document (the price is the same for a PDF version or a printed version on dead trees).

Yes, I find it stupid to have to pay to read standards. Luckily the Internet is build upon free (as in free beer) Request for Comments (RFC) from The Internet Engineering Task Force (IETF^®) and not ISO protocols. But that is not the subject of this article.

PyKCS11 repository has moved

PyKCS11 is the Python wrapper above a PKCS#11 library. I presented it in "PyKCS11 introduction"

New location

I moved the PyKCS11 Mercurial repository in a team repository.
The new repository is now at: https://bitbucket.org/PyKCS11/pykcs11

Upgrade

1. Create a new local repository using the new URL.
   

   $ hg clone https://bitbucket.org/PyKCS11/pykcs11

2. Apply your local changes, if any.

New version of libccid: 1.4.22

I just released a version 1.4.22 of libccid the Free Software CCID class smart card reader driver.

Changes:
1.4.22 - 10 January 2016, Ludovic Rousseau

• Add support of
• Aktiv Rutoken PINPad 2
• Aladdin R.D. JC-WebPass (JC600)
• Aladdin R.D. JCR-770
• Aladdin R.D. JaCarta
• Aladdin R.D. JaCarta Flash
• Aladdin R.D. JaCarta LT
• Aladdin R.D. JaCarta U2F (JC602)
• Athena ASEDrive IIIe Combo Bio PIV
• Athena ASEDrive IIIe KB Bio PIV
• GEMALTO CT1100
• GEMALTO K1100
• Hitachi, Ltd. Hitachi Biometric Reader
• Hitachi, Ltd. Hitachi Portable Biometric Reader
• Nitrokey Nitrokey Storage
• THURSBY SOFTWARE TSS-PK1
• Thursby Software Systems, Inc. TSS-PK7
• Thursby Software Systems, Inc. TSS-PK8
• Patch for Microchip SEC1110 reader on Mac OS X (card events notification)
• Patch for Cherry KC 1000 SC (problem was with a T=1 card and case 2 APDU)
• Fix support of FEATURE_MCT_READER_DIRECT for the Kobil mIDentity visual reader
• Set timeout to 90 sec for PPDU (Pseudo APDU) commands. This change allows the use of a Secure Verify command sent as a PPDU through SCardTransmit().
• Fix a crash when reader reader initialization failed
• Fix initialization bug with Gemalto Pinpad reader on Mac OS X
• Some minor bugs fixed

Someone is playing with my online ATR parsing tool

I provide a Smart card ATR parsing online tool since 2010. See "Parsing an ATR: now more web 2.0 friendly" for the previous article about it.

The online tool is no more available and you get the error message:


This is because a computer has provided the same ATR (the default one) over and over again until my quota was exceeded.


I know the IP address of the offending computer: 167.114.13.x. It is a computer in an OVH data center in Beauharnois (BHS) Canada.

The quota should be restored every 24 hours so the web application may be available again when you read this.

If you are the owner of the offending computer please stop. It is a denial of service. It is not funny.

For the others, sorry for the inconvenience.

MUSCLE mailing list statistics for 2015

As I did in 2009, 2010, 2011, 2012, 2013 and 2014 I propose some statistics of the MUSCLE mailing list usage.

Evolution

Year	Total number of messages	Progression
2009	603
2010	718	+19 %
2011	999	+39 %
2012	207	-79 %
2013	198	-4 %
2014	194	-2 %
2014	194	-2 %
2015	120	-38 %

The number of messages is declining. At the same time I get more requests by email.

My interpretation is that the software pcsc-lite, libccid, etc. are stable now. But people have problems using it. That could also explain why the sample code articles have success (see my previous article "Happy new year 2016").

Comments

I am still the top poster on the MUSCLE mailing list with 33% of the messages.

The second top poster is Fabrice DIMITRIOU (fdimitriou@tmm-software.com) with 12 "Out of office" messages and the most successful subject. Well done Fabrice ☺.

Statistics from 20.1.2015 to 31.12.2015
for pcsclite-muscle@lists.alioth.debian.org

People who have written most messages:

	Author	Msg	Percent
1	ludovic.rousseau@gmail.com	40	33.33 %
2	fdimitriou@tmm-software.com	12	10.00 %
3	bill.c.roberts@gmail.com	8	6.67 %
4	guy@linux-service.be	7	5.83 %
5	rickyepoderi@yahoo.es	5	4.17 %
6	henrik@synth.no	4	3.33 %
7	fdeybach@gmail.com	4	3.33 %
8	Jindrich.Mican@lgnexera.at	3	2.50 %
9	morgner@informatik.hu-berlin.de	3	2.50 %
10	EHeck@intarsys.de	3	2.50 %
11	william.to@erg.com.hk	3	2.50 %
12	martin@martinpaljak.net	2	1.67 %
13	moshman@gmail.com	2	1.67 %
14	orzel@freehackers.org	2	1.67 %
15	elbuffo166@gmail.com	2	1.67 %
16	saper@saper.info	2	1.67 %
17	marian.thieme@gmail.com	2	1.67 %
18	gdt@ir.bbn.com	1	0.83 %
19	jhutz@cmu.edu	1	0.83 %
20	bbsoo7@live.com	1	0.83 %
21	pcsclite.pkoch@dfgh.net	1	0.83 %
22	russ@garrett.co.uk	1	0.83 %
23	info@boac.nl	1	0.83 %
24	helpcrypto@gmail.com	1	0.83 %
25	Tom.Arnautovic@neardesk.com	1	0.83 %
26	crack.nyse@gmail.com	1	0.83 %
27	luc.mazardo@orange.com	1	0.83 %
28	Pcsclite-muscle =	1	0.83 %
29	Herve.CODINA@celad.com	1	0.83 %
30	nicksp@gmail.com	1	0.83 %
	other	3	2.50 %

Best authors, by total size of their messages (w/o quoting):

	Author	KBytes
1	ludovic.rousseau@gmail.com	296.6
2	fdimitriou@tmm-software.com	102.6
3	bill.c.roberts@gmail.com	83.0
4	guy@linux-service.be	53.8
5	Tom.Arnautovic@neardesk.com	45.1
6	EHeck@intarsys.de	29.4
7	rickyepoderi@yahoo.es	28.8
8	william.to@erg.com.hk	23.4
9	morgner@informatik.hu-berlin.de	22.1
10	martin@martinpaljak.net	20.7
11	orzel@freehackers.org	18.3
12	Herve.CODINA@celad.com	16.2
13	henrik@synth.no	15.3
14	fdeybach@gmail.com	13.6
15	ignacio.casal@nice-software.com	13.6
16	helpcrypto@gmail.com	10.7
17	saper@saper.info	10.6
18	elbuffo166@gmail.com	10.4
19	Jindrich.Mican@lgnexera.at	9.2
20	bbsoo7@live.com	8.8
21	marian.thieme@gmail.com	8.5
22	Pcsclite-muscle =	8.5
23	gdt@ir.bbn.com	8.3
24	moshman@gmail.com	7.7
25	godfreyhkchung@gmail.com	7.0
26	luc.mazardo@orange.com	6.9
27	mkl@pengutronix.de	6.6
28	crack.nyse@gmail.com	5.2
29	russ@garrett.co.uk	5.0
30	nicksp@gmail.com	2.1

Best authors, by average size of their message (w/o quoting):

	Author	bytes
1	Tom.Arnautovic@neardesk.com	46175
2	Herve.CODINA@celad.com	16576
3	ignacio.casal@nice-software.com	13877
4	helpcrypto@gmail.com	10974
5	bill.c.roberts@gmail.com	10625
6	martin@martinpaljak.net	10576
7	EHeck@intarsys.de	10019
8	orzel@freehackers.org	9351
9	bbsoo7@live.com	8967
10	fdimitriou@tmm-software.com	8758
11	Pcsclite-muscle =	8680
12	gdt@ir.bbn.com	8473
13	william.to@erg.com.hk	7978
14	guy@linux-service.be	7872
15	ludovic.rousseau@gmail.com	7593
16	morgner@informatik.hu-berlin.de	7559
17	godfreyhkchung@gmail.com	7120
18	luc.mazardo@orange.com	7066
19	mkl@pengutronix.de	6797
20	rickyepoderi@yahoo.es	5890
21	saper@saper.info	5448
22	elbuffo166@gmail.com	5324
23	crack.nyse@gmail.com	5316
24	russ@garrett.co.uk	5146
25	marian.thieme@gmail.com	4362
26	moshman@gmail.com	3918
27	henrik@synth.no	3906
28	fdeybach@gmail.com	3480
29	Jindrich.Mican@lgnexera.at	3136
30	nicksp@gmail.com	2172

Table showing the most successful subjects:

	Subject	Msg	Percent
1	[Pcsclite-muscle] Absence du bureau / Out of the office	13	10.83 %
2	[Pcsclite-muscle] IFD polling	11	9.17 %
3	[Pcsclite-muscle] pcscd segfaults	8	6.67 %
4	[Pcsclite-muscle] Authenticate on OSX with NFC	6	5.00 %
5	[Pcsclite-muscle] question about locking and reconnect	5	4.17 %
6	[Pcsclite-muscle] Possible data truncation on receive in 1.8.14	5	4.17 %
7	[Pcsclite-muscle] Failure to read Gemalto IDPrime MD with USB	4	3.33 %
8	[Pcsclite-muscle] Android Smart Card Emulator	3	2.50 %
9	[Pcsclite-muscle] Deny card access for one application	3	2.50 %
10	[Pcsclite-muscle] What is CLASS2_IOCTL_MAGIC?	3	2.50 %
11	[Pcsclite-muscle] Solaris 11 and pcsc-lite	3	2.50 %
12	[Pcsclite-muscle] [PATCH] ContextThread: SCARD_TRANSMIT: work	3	2.50 %
13	[Pcsclite-muscle] Semantics of	2	1.67 %
14	AW: Issue with pcsc-lite through rdesktop (share of scard to	2	1.67 %
15	[Pcsclite-muscle] Yubikey in OTP+U2F+CCID mode	2	1.67 %
16	pcsc-lite and polkit rules in openSUSE 13.2	2	1.67 %
17	[Pcsclite-muscle] Card Reader Issue	2	1.67 %
18	[Pcsclite-muscle] Error communicating to: GemPCTwin serial 00 00	2	1.67 %
19	[Pcsclite-muscle] Smartcard PAM module load failed after update	2	1.67 %
20	[Pcsclite-muscle] [PATCH 1/1] pcscdaemon: fix "at_exit() write()	2	1.67 %
21	[Pcsclite-muscle] OMNIKEY CardMan 5321 reader shown twice	2	1.67 %
22	[Pcsclite-muscle] Questions about supported devices page	2	1.67 %
23	[Pcsclite-muscle] Possibility to disable Reader Interface?	2	1.67 %
24	[Pcsclite-muscle] Feitian SCR301 - new version	2	1.67 %
25	[Pcsclite-muscle] Smartcard reader not detected on fedora 23	2	1.67 %
26	[Pcsclite-muscle] problems with rocketec reader	2	1.67 %
27	[Pcsclite-muscle] apdu4j - Java code and command line utility for	1	0.83 %
28	[Pcsclite-muscle] OSX - Yosemite - PCSC-Lite vs CryptoToken	1	0.83 %
29	[Pcsclite-muscle] questions for "Card auto power on and off"	1	0.83 %
30	[Pcsclite-muscle] TAG_IFD_POOLING_THREAD_WITH_TIMEOUT not	1	0.83 %
	other	21	17.50 %

Most used email clients:

	Mailer	Msg	Percent
1	(unknown)	94	78.33 %
2	Mozilla/5.x	8	6.67 %
3	KMail	7	5.83 %
4	Postbox 3.0.11 (Macintosh/20140602)	2	1.67 %
5	Apple Mail (2.2070.4)	2	1.67 %
6	K-9 Mail for Android	2	1.67 %
7	Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.4 (berkeley-unix)	1	0.83 %
8	Evolution 3.10.4-0ubuntu2	1	0.83 %
9	Microsoft Outlook 15.0	1	0.83 %
10	git-send-email 1.7.9.5	1	0.83 %
11	Apple Mail (2.3096.5)	1	0.83 %
	other	0	0.00 %

Table of maximal quoting:

	Author	Percent
1	info@boac.nl	77.38 %
2	pcsclite.pkoch@dfgh.net	53.62 %
3	Tom.Arnautovic@neardesk.com	36.24 %
4	moshman@gmail.com	32.81 %
5	morgner@informatik.hu-berlin.de	24.95 %
6	bill.c.roberts@gmail.com	23.27 %
7	henrik@synth.no	22.74 %
8	nicksp@gmail.com	21.21 %
9	ignacio.casal@nice-software.com	19.96 %
10	helpcrypto@gmail.com	15.32 %
11	fdeybach@gmail.com	14.77 %
12	saper@saper.info	14.59 %
13	guy@linux-service.be	14.53 %
14	Jindrich.Mican@lgnexera.at	14.53 %
15	elbuffo166@gmail.com	14.16 %
16	fdimitriou@tmm-software.com	13.75 %
17	jhutz@cmu.edu	13.59 %
18	rickyepoderi@yahoo.es	13.02 %
19	marian.thieme@gmail.com	13.02 %
20	william.to@erg.com.hk	11.63 %
21	ludovic.rousseau@gmail.com	8.78 %
22	orzel@freehackers.org	7.46 %
23	Pcsclite-muscle =	7.00 %
24	bbsoo7@live.com	6.35 %
25	EHeck@intarsys.de	5.93 %
26	martin@martinpaljak.net	5.54 %
27	luc.mazardo@orange.com	3.68 %
28	crack.nyse@gmail.com	3.41 %
29	Herve.CODINA@celad.com	3.12 %
30	godfreyhkchung@gmail.com	1.01 %
	average	14.73 %

Graph showing number of messages written during hours of day:

msgs	2	0	0	0	0	0	0	2	3	2	10	6	8	10	13	13	9	8	10	4	6	7	3	4
hour	0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15	16	17	18	19	20	21	22	23

Graph showing number of messages written during days of month:

msgs	2	3	7	4	4	3	5	5	3	5	4	3	4	1	0	1	2	10	3	3	3	3	3	10	9	8	3	3	3	0	3
day	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15	16	17	18	19	20	21	22	23	24	25	26	27	28	29	30	31

Graph showing number of messages written during days of week:

msgs	16	25	23	19	26	6	5
	Mon	Tue	Wed	Thu	Fri	Sat	Sun

Maximal quoting:

Author :	guy@linux-service.be
Subject :	[Pcsclite-muscle] debian 8 pcscd
Date :	Wed, 22 Jul 2015 12:18:13 +0200
Quote ratio:	77.62% / 4540 bytes

Longest message:

Author :	Tom.Arnautovic@neardesk.com
Subject :	[Pcsclite-muscle] Card Reader Issue
Date :	Mon, 18 May 2015 13:46:56 +0000
Size :	72421 bytes

Most successful subject:

Subject :	[Pcsclite-muscle] Absence du bureau / Out of the office
No. of msgs:	13
Total size :	130236 bytes

Final summary:

Total number of messages:	120
Total number of different authors:	33
Total number of different subjects:	51
Total size of messages (w/o headers):	1083656 bytes
Average size of a message:	9030 bytes

---

Input file last updated: Sun Jan 3 10:18:30 2016

Generated by MailListStat v1.3