PinPad AKA SPR532 and OpenSC mini-howto

To get feedback as early as possible, here's a small tutorial how to get going with SPR532 and pinpad. There are other PinpadReaders and other interfaces but the given interface makes use of TeleTrust Class 2 reader IOCTL mechanism that shall be part of PC/SC version 2.0 spec as Part 10. There is also part 10 of the new PC/SC spec but TeleTrust? interface requires no special features from the PC/SC middleware but from the given IFDHandler itself and thus can be deployed now - by introducing the needed support in reader drivers and application side (OpenSC in this case).

Things you need to try it out:

• get yourself a SPR532 reader from www.scmmicro.com
• upgrade the firmware to the latest (5.05 version) using stuff from here: http://martin.paljak.pri.ee/download/esteid/ccid/SCM-readers/SPR532/
• install pcsc-lite from the tarball available here: http://martin.paljak.pri.ee/download/esteid/pcsc-lite/
• install the ccid driver from the tarball available there: http://martin.paljak.pri.ee/download/esteid/ccid/
• install opensc from snapshots that pop out here: http://martin.paljak.pri.ee/download/esteid/opensc and set the use_pinpad option in the config file.

NOTE: from the three download links above, directory test/ contains the latest versions and thus might be better for the braves.

Notes:

• untill the needed changes get upstream, make sure that you have the versions from the locations mentioned before.
• the whole topic is hairy - see discussions on muscle and opensc-devel mailinglist:
  • http://archives.neohapsis.com/archives/dev/muscle/2005-q1/0199.html
  • http://archives.neohapsis.com/archives/dev/muscle/2005-q1/0221.html
  • http://www.opensc.org/pipermail/opensc-devel/2005-March/005709.html

What you can do:

1. test and provide feedback
2. make the code of ccid library better. It seriously looks ugly when the SecurePIN functions come to play - though it works.
3. help to argue how things should look like in different places and how we shall solve some issues - see DesignDiscussion

Known issues:

1. It is known to work with SPR532 under Linux. In practice it should work without modifications on windows using the latest windows drivers available from the SCM specific download location above.
2. Support is only for T=0 cards (as of now Estonian and Belgian eID cards have been tested on Linux). It might as well work with T=1 cards, but to try it out you must disable the check for active protocol in reader-pcsc.c. Write a note here if it works.
3. Support for pinpad operations in general might lag behind your needs. Patches most welcome :)