pkcs15-tool fails with Cryptoflex e-gate 32 k in Broadcom 5800 cardreader

[Christian Felsing]

Binary package hint: opensc

root@e6500:~# lsb_release -rd
Description: Ubuntu intrepid (development branch)
Release: 8.10

root@e6500:~# apt-cache policy opensc
opensc:
  Installiert: 0.11.4-5ubuntu1
  Kandidat: 0.11.4-5ubuntu1
  Versions-Tabelle:
 *** 0.11.4-5ubuntu1 0
        500 http://de.archive.ubuntu.com intrepid/universe Packages
        100 /var/lib/dpkg/status

Expected result:

pkcs15-tool -D should show a number of objects installed on card. This happens as expected with a OpenPGP card:

---cut here---
root@e6500:~# pkcs15-tool -D
PKCS#15 Card [OpenPGP Card]:
 Version : 257
 Serial number : d2760001240101010001000011170000
 Manufacturer ID: OpenPGP project
 Language : de
 Flags : Login required, PRN generation, EID compliant

PIN [Signature PIN]
 Com. Flags: 0x3
 ID : 01
 Flags : [0x13], case-sensitive, local, initialized
 Length : min_len:0, max_len:254, stored_len:254
 Pad char : 0x00
 Reference : 1
 Type : ascii-numeric
 Path : 3f00
 Tries left: 3

...etc.
---cut here---

Real result: With a Cryptoflex e-gate 32k following happens if Broadcom 5800 cardreader is used:

---cut here---
root@e6500:~# pkcs15-tool -D
[pkcs15-tool] reader-pcsc.c:255:pcsc_transmit: unable to transmit
[pkcs15-tool] apdu.c:394:do_single_transmit: unable to transmit APDU
[pkcs15-tool] iso7816.c:127:iso7816_read_binary: APDU transmit failed: Transmit failed
[pkcs15-tool] card.c:430:sc_read_binary: returning with: Transmit failed
[pkcs15-tool] pkcs15.c:761:sc_pkcs15_bind: returning with: Unsupported card
PKCS#15 initialization failed: Unsupported card
---cut here---

If ReinerSCT cyberflex or Cryptoflex USB is used, smartcard behaves as expected.

[Christian Felsing (hostmaster-taunusstein)]

Same behaviour by OpenSC on Windows XP.

[Christian Felsing (hostmaster-taunusstein)]

Smartcard "Giesecke & Devrient Starcos 2.3" works as expected. Obviously there is a problem OpenSC / Broadcom 5800 especially with "Cyberflex e-gate 32 k" Smartcards.

[Christian Felsing (hostmaster-taunusstein)]

Further investigation showed that problem was caused by a firmware bug in Dell E6500. According to Dell Case ID: 6575310 Case #: 20081014004414483 Dell will fix that. I would reccomend to close this bug at Ubuntu.

[Christian Felsing (hostmaster-taunusstein)]

Dell BIOS A09 still does not fix that.

[Laurent Bigonville (bigon)]

Is this bug fixed?

@Christian: where do you see this 'Dell Case ID' thing?

[Christian Felsing (hostmaster-taunusstein)]

Dell offers firmware update:

http://ftp.us.dell.com/Security/Broadcom_Unified-Security-Hu_A07_R210234.exe

You need Windows XP or Vista for installing it. After installing that, Linux also reads Cryptoflex cards.

[Laurent Bigonville (bigon)]

Unfortunately the firmware update doesn't fix this issue

[Martin Paljak (martinpaljak)]

Apparently this is a bug in the pcsc-lite reader driver of the Broadcom 5800 reader, not OpenSC. If the reader (driver) does not want to talk to the card, there's not much OpenSC can do to fix this.

[Ludovic Rousseau (ludovic-rousseau-gmail)]

Please follow http://pcsclite.alioth.debian.org/pcsclite.html#support to generate pcscd logs and attach them to the bug report.

[Christian Felsing (hostmaster-taunusstein)]

Solved with OpenSC 12.2

[David Ward (dpward)]

Comment #10 indicates this was fixed in OpenSC 0.12.2, which was released in precise (before it reached end-of-life).

opensc (0.12.2-2ubuntu1) precise; urgency=low

  * Merge from Debian testing. (LP: #979986) Remaining changes:
    - debian/patches/missing-libs.patch: Add libraries to allow opensc to build
    - debian/opensc.docs: include html documentation
    - debian/control: Depend on pcscd
    - debian/control: Add dh-autoreconf as build-dependency
    - debian/rules: Call autoreconf sequence to rebuild autotools files
    - debian/opensc.install: Added profiles