How does smart card store keys and saves it from client applications on same memory?
How does smart card store keys and saves it from client applications on same memory?
Smart card saves keys on its memory. We see other client applications also run on it. Everyone is using same physical memory. How does smart card application protect its keys?
expert_sg Answered question May 12, 2021
The smart card chips itself designed to be tamper-proof and resist attempts to extract key data. Smart card operating system or application will generally have specific key store area in the memory with additional security mechanisms (eg: encryption, key shares etc). And the application will be designed in such a way that there is no provision to retrieve key like you retrieve data using APDUs (eg: READ BINARY)
Bytes & Nibbles Technologies Posted new comment May 9, 2021
@GBoy7816, Exactly
Right – In addition to that keep in mind the security enforced by the Java Virtual Machine for the Java cards which provide isolation between different applications.
On the OS side, there are also so ways to use keys without accessing them.