"JavaCard supports 2048 bits key length only in DDA.", said in a java card doc provided by card manufacturer.
So my question is what is DDA and SDA? How can I install applet in this mode.
ps. I only know that
SDA: Static Data Authentication
DDA: Dynamic Data Authentication
What's SDA and DDA?
Moderator: UNKNwYSHSA
-
lostsiwonlw
- Posts: 55
- Joined: Fri Jul 31, 2015 9:09 pm
- Points :358
- Contact:
What's SDA and DDA?
Searching for meaning...
-
horse dream
- Posts: 76
- Joined: Thu May 21, 2015 11:48 pm
- Points :138
- Contact:
Re: What's SDA and DDA?
FYI,
SDA ensures the authenticity of ICC data. After SDA it is sure that the data from the ICC is real and hasn't changed by anyone. But SDA doesn't assure the uniqueness of ICC data. SDA guarantees that data on cards is valid because we trust a high level certification authority which signs the data. But an attacker can record a card session and build for example a new virtuel card because same data is used here for all session.
But in DDA flow - we can say it is checking SDA + giving random data to card by Terminal to sign and here this part makes cloning of card impossible because each session use different random number so recording a card session will not work in next card session.
SDA ensures the authenticity of ICC data. After SDA it is sure that the data from the ICC is real and hasn't changed by anyone. But SDA doesn't assure the uniqueness of ICC data. SDA guarantees that data on cards is valid because we trust a high level certification authority which signs the data. But an attacker can record a card session and build for example a new virtuel card because same data is used here for all session.
But in DDA flow - we can say it is checking SDA + giving random data to card by Terminal to sign and here this part makes cloning of card impossible because each session use different random number so recording a card session will not work in next card session.
Who is online
Users browsing this forum: No registered users and 11 guests