* Package name : libciepki1 Version : 1.0-1 Upstream Author : Andrea della Porta <sfaragnaus@gmail.com> * URL : http://github.com/italia/cie-middleware-linux * License : (BSD-3-Clause) Programming Lang: (C++) Description : PKCS11 driver for Italian CIE ciepki allows any PKCS11 enabled application to leverage the cryptographic and authentication facilities of the Italian CIE. Binaries to change/unlock PIN are also provided. This will be the main middleware to use with any Italian ID card. Source code is provided through github as above but this package will be a binary only one since teh cachelib will be slightly changed to provide added security though encryption, and the key/iv should not be exposed. Cachelib reference implementation on github is almost identical except for the lacking encrypted data. I guess I will need a sponsor to push it to non-free repository.
Hi, what are the key and IV used for, encryption/decryption? What's the idea behind using the same key and IV for everybody? Why does this program need them if the program user cannot decrypt them? Or is the decryption key stored on the Italian CIE? If so, what's the point of encrypting the key and IV if the first user can immediately share the plain text version of them with the rest of the world? Have you checked if there is already such a program that works with the Italian CIE? List of these programs can be found from <https://wiki.debian.org/Smartcards#Drivers>. Joonas
Hello, thanks for volunteering to package this piece of software. Is there any progress on the packaging effort? the 3-clause BSD license, why would you want to package it for the non-free archive? Could you please clarify this "added security though encryption" thing? What do you mean "the key/iv should not be exposed"? Sounds like security through obscurity, which is (almost) never a good idea. I see that Joonas Kylmälä (who reads us in Cc) commented your ITP bug. I share some of his concerns/doubts. Please let us know. Thanks for your time!