OS2World OLD-STATIC-BACKUP Forum

OS2 World.Com Bounty System => General Discussion => Topic started by: kim on 2009.01.09, 18:16:41

Title: Security related bounties
Post by: kim on 2009.01.09, 18:16:41
There are current two bounties related to security with the overall purpose to secure data on os2 systems; may I suggest that we join following bounties:  GemPlus PC400 driver support (http://www.os2world.com/content/view/352/71/) and  TrueCrypt port (http://www.os2world.com/content/view/330/71/) to either a 3rd option of encryption solution for OS2 or TrueCrypt if still valid option. By this we'll increase the bounty value and as well I will suggest that OS2WF will make additional sponsorship of this new updated bounty.
Title: Re: Security related bounties
Post by: Andi710 on 2009.01.09, 20:30:24
Hm. I don't quite see the GemPlus driver as a substitute for the truecrypt IFS.
Title: Re: Security related bounties
Post by: kim on 2009.01.09, 21:49:24
Agree with you Andi; but the GemPlus driver bounty has been around a while without any progress and I've even offered hardware to be used for development without luck and as said. So both are security related and I know that Björn and myself have no problem to withdraw the GemPlus bounty and move over the funding to TrueCrypt.

But, there seems to be some more project now related to the GemPlus card readers that might be workable for OS2; or not; among other I noticed following at SourceForge for OS X Gemplus drivers (http://sourceforge.net/projects/gpr400-darwin). Next what is needed if we want a fill PKCS #11 (http://ospkibook.sourceforge.net/docs/OSPKI-2.4.7/OSPKI-html/software-gpkcs11.htm) implementation (Public-Key Cryptography Standard) if we want to have a application interface. I'm still interested of some kind of Token based solution to handle encryption keys; USB-stick is another way of having a portable keys; but I then want to be able to encrypt the stick; so this is why TrueCrypt was earlier suggested as a substitution for smartcard implementation.

But, hey if there are more interested of Smartcard implementation I'm open for ideas and feedback if we should try to keep this bounty open. Please then do check and continue this dialog with the original thread for the GemPlus driver (http://www.os2world.com/component/option,com_smf/Itemid,63//topic,102_new_html/#new). The TrueCrypt forum thread can be found here (http://www.os2world.com/component/option,com_smf/Itemid,63/topic,99.msg159/topicseen,1/#new).