Author Topic: Security related bounties  (Read 4051 times)

kimhav

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 990
    • View Profile
    • My Blog!
Security related bounties
« on: 2009.01.09, 18:16:41 »
There are current two bounties related to security with the overall purpose to secure data on os2 systems; may I suggest that we join following bounties:  GemPlus PC400 driver support and  TrueCrypt port to either a 3rd option of encryption solution for OS2 or TrueCrypt if still valid option. By this we'll increase the bounty value and as well I will suggest that OS2WF will make additional sponsorship of this new updated bounty.
« Last Edit: 2009.01.09, 18:19:38 by kimhav »

Andi710

  • Jr. Member
  • **
  • Posts: 71
    • View Profile
Re: Security related bounties
« Reply #1 on: 2009.01.09, 20:30:24 »
Hm. I don't quite see the GemPlus driver as a substitute for the truecrypt IFS.

kimhav

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 990
    • View Profile
    • My Blog!
Re: Security related bounties
« Reply #2 on: 2009.01.09, 21:49:24 »
Agree with you Andi; but the GemPlus driver bounty has been around a while without any progress and I've even offered hardware to be used for development without luck and as said. So both are security related and I know that Björn and myself have no problem to withdraw the GemPlus bounty and move over the funding to TrueCrypt.

But, there seems to be some more project now related to the GemPlus card readers that might be workable for OS2; or not; among other I noticed following at SourceForge for OS X Gemplus drivers. Next what is needed if we want a fill PKCS #11 implementation (Public-Key Cryptography Standard) if we want to have a application interface. I'm still interested of some kind of Token based solution to handle encryption keys; USB-stick is another way of having a portable keys; but I then want to be able to encrypt the stick; so this is why TrueCrypt was earlier suggested as a substitution for smartcard implementation.

But, hey if there are more interested of Smartcard implementation I'm open for ideas and feedback if we should try to keep this bounty open. Please then do check and continue this dialog with the original thread for the GemPlus driver. The TrueCrypt forum thread can be found here.
« Last Edit: 2009.01.09, 21:57:33 by kimhav »