How does smart card store keys and saves it from client applications on same memory?
How does smart card store keys and saves it from client applications on same memory?
Smart card saves keys on its memory. We see other client applications also run on it. Everyone is using same physical memory. How does smart card application protect its keys?
expert_sg Answered question May 12, 2021
Below are several layers of protection applied for sensitive data storage in smartcard:
- Encrypted storage of data (include keys and data) in NVM (Flash/EEPROM)
- Scrambling of data storage (virtual/physical memory concept – real physical address unknown)
- Implementations to prevent side-channel attacks. Sensors to monitor frequency, voltage, temperature, light parameters
- Security Domain implementation following Global Platform specifications for Multi-application cards.
- Application-level Access Rights Protection for Key storage
- Application-level use of secure Javacard API for Key storage and access.
smartcard chip is the most secure and trusted hardware solution for on-chip key generation, digital signature.
expert_sg Answered question May 12, 2021