JC101-17C: Communication Security Rationale

Foreword: If you have been following the tutorial, you may have noticed that the last post was numbered 13. There are therefore 3 missing posts. Like post 13, they should be dedicated to testing techniques (building a test plan, writing tests, etc.). However, writing tests without using proprietary tools is not as easy as I naively thought, so these posts will have to wait a little. So for now, we will go for a few post about communication security.

– o –

In most smart card applications, the communication between the card and the terminal needs to be secured. Smart card developers rapidly get used to this, and securing communications becomes a reflex. Nevertheless, let’s spend a little time looking at the reasons behind this security measure.
Secure communication is an answer to a few important questions, that we will detail below.
Continue Reading »