CCID free software driver
This package provides the source code for a generic USB CCID
(Chip/Smart Card Interface Devices) driver and ICCD (Integrated
Circuit(s) Card Devices).
See the USB
CCID and ICCD
specifications from the USB working
group.
Authors
The main author is Ludovic Rousseau
<ludovic.rousseau@free.fr>.
I reused source code from other free software projects whose
authors are:
- Carlos Prados for the PPS and ATR parsing code (taken from his
towitoto driver) in towitoko/ directory.
- Olaf Kirch for the T=1 TPDU code (from the OpenCT package) in
openct/ directory. I (Ludovic Rousseau) greatly improved this
code.
Licence
This library is free software; you can redistribute it and/or modify it
under the terms of the GNU Lesser General Public License as published by
the Free Software Foundation; either version 2.1 of the License, or (at
your option) any later version.
This library is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser
General Public License for more details.
You should have received a copy of the GNU Lesser General Public License
along with this library; if not, write to the Free Software Foundation,
Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
Source download
30 April 2008, ccid-1.3.6,
README.
You can also access the Subversion
developement version. You may need to use the Subversion version to
support the latest added readers.
Main CCID/ICCD features supported
- Exchange levels
- short APDU
- extended APDU (with some limitations)
- TPDU
- character
- multi-stlot readers
- secure verify/modify PIN entry
- Data rates list
- LCD display (Gemalto GemPC PIN PAD)
- Extended APDU (for T=1 cards only and if your reader is in TPDU
mode or extended APDU mode)
- SCardGetAttrib() attributes
- ICCD versions A and B
CCID features not yet supported
- Manage suspend/resume (for example in a laptop)
- Reader clock frequency change
Contact me if you
want to see the support of the above not
yet supported features and you have a budget.
Non CCID features that I do not plan to support
- read/write on memory cards
In fact I may implement one of these features if you have a budget.
Sending usefull logs
If you have a problem and want to get support from me you shall include the
following information:
Versions
- CCID driver version
- Operting system name and version
- pcsc-lite version
Log
Then you shall generate a complete log.
- Edit the file
/usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist
and change the value of ifdLogLevel from 0x0003
(default) to 0x0007
- Kill the pcscd process
- Start pcscd from the command line as: "pcscd --foreground
--debug --apdu"
- Stop pcscd (using Control-C) after the problem occured and
send me the generated output
Supported CCID/ICCD readers
To know if a smart card reader is
CCID compliant and should be supported by this driver but is not
listed bellow
Just get the source
code of this driver and do:
tar xzvf ccid-x.y.z.tar.gz
cd ccid-x.y.z
./configure
make
sudo ./src/parse > output
and send me the generated output file.
If you are a reader manufacturer and your reader is not listed here
then contact me.
List in alphabetical order
- ActivCard reader 3.0
- ActivIdentity ActivKey
ActivKey USB Tokens
- Advanced Card Systems ACR 38U-CCID
Old versions of this reader are bogus: the reader do timeout
when a special USB frame is sent from the reader. If the frame
size if a multiple of wMaxPacketSize the communication is stopped.
- Alcor Micro AU9520
Firmware 1.01 is bogus. The time request sent by the card is
not forwarded by the reader to the host.
- Athena ASEDrive IIIe
USB V2 (firmware older than 5.02 is bogus)
- Athena ASEDrive IIIe
KB (firmware older than 6.07 is bogus)
- Blutronics Bludrive II CCID
- C3PO LTC31 (new
model with USB product ID 0x0006)
- Cherry XX33 keyboard
- Cherry XX44
(SmartBoard G83-6744)
- Cherry SmartTerminal ST2000U
- Cherry ST-1044U
- Covadis Alya
- Dell keyboard SK-3106 and Dell smart card reader keyboard
- Eutron CryptoIdentity
- Eutron Digipass
860
- Eutron SIM
Pocket Combo
- Eutron
Smart Pocket
- Gemalto GemPC Card Reader
If you want official support from Gemalto you can use
this
driver. See also Gemalto drivers in
the known problems section.
- Gemalto GemPC USB SL or GemPC 433-SL
If you want official support from the Gemalto you can use
this
driver. See also Gemalto drivers in
the known problems section.
- Gemalto PC
Pinpad Reader
Known problems/limitations:
- Does not support minimum PIN length (wPINMaxExtraDigit)
lower than 4
- Does not support maximum PIN length (wPINMaxExtraDigit)
greater than 8
- Does not support "no string" (0x00) displayed for
bNumberMessage (corrected by the driver)
- Does not support "default" (0xFF) display message for
bNumberMessage (corrected by the driver)
- Does not support validation by "Max size reached" (0x01)
for bEntryValidationCondition (corrected by the driver)
- Does not support validation by "Timeout occurred" (0x04)
for bEntryValidationCondition (corrected by the driver)
- Does send a VERIFY PIN command with an empty PIN to get
the number of remaining trials. This may be problematic with
some smart cards like the Belgian eID card that does not
support this and will decrement the counter
If you want official support from the Gemalto you can use
this
driver. See also Gemalto drivers in
the known problems section.
- Gemalto PC Twin Reader (old name:
GemPC Twin)
If you want official support from the Gemalto you can use
this
driver. See also Gemalto drivers in
the known problems section.
- Gemalto GemCore POS Pro
- Gemalto GemCore SIM Pro
- Gemalto USB Shell
Token V2 (old name: GemPC Key)
If you want official support from the Gemalto you can use
this
driver. See also Gemalto drivers in
the known problems section.
- Kobil KAAN
Base (firwmare older than 0.37 is bogus)
- Kobil KAAN
Advanced (firmware older than 0.37 is bogus)
- Kobil KAAN SIM III
- Kobil EMV TriCAP Reader
- Kobil KAAN TriB@nk
- Kobil SecOVID Reader III
- Lexar Smart
Enterprise Guardian
- OmniKey
CardMan 3121
- O2Micro Oz7762
This reader is common as an internal reader in laptops like the
Dell D420 or D820.
- RSA SecurID SID800
- SCM Micro SCR 331
You have to upgrade
the firmware using version 5.18 or later.
- SCM Micro SCR 331-DI
You have to upgrade
the firmware using version 6.22 or later.
- SCM Micro SCR 3310
- SCM Micro SCR 3311
- SCM Micro SCR 335
Upgrade the firmware
using 5.14 or later.
- SCM Micro SPR 532
You have to upgrade
the firmware to version 5.10 or later.
- SmartEpad (v
2.0)
- Verisign Secure
Storage Token
- Verisign Secure Token
- Xiring Teo
Should work but untested by me
I would like to get these readers to perform test and validation
and move them in the supported list above. If you are one of the
manufacturers, please, contact me.
Unsupported or partly supported CCID readers
- ActivCard USB
reader 2.0
The reader do timeout when a special USB frame is sent from the
reader. If the frame size if a multiple of wMaxPacketSize the
communication is stopped.
Some users report that this reader is in fact a SCR-331 with a
different firmware and that you can upgrade its firmware to
transform it into a (supported) SCR-331 reader.
- C3PO LTC31 (old
model with USB product id 0x0003)
The reader works fine with Linux kernel 2.4 but does not with Linux
kernel 2.6. The ioctl() syscall returns EINVAL (Invalid
argument). The manufacturer is working on a solution.
For linux 2.6 you have to use this patch and
recompile the kernel as described here.
- iDream THRC2002-2
or ID-SMID01
and maybe other commercial names
- PPS fails with a Cryptoflex card
- powerup fails with a Setcos card
The reader does work with the belgium eID (the reader is
sold for this application) until you remove the card and the reader
goes mad.
- Kobil KAAN
mIDentity
Time requests are not managed correctly and make the firmware
fails. This is not a problem unless you use a time-consuming APDU
like RSA key generation.
A new firmware will correct the bug.
- Reiner-SCT cyberJack pinpad(a)
Time requests are not managed and the driver may time out without
any response from the reader. This is not a problem unless you use
a time-consuming APDU like RSA key generation.
Supported and unsupported operating systems
GNU/Linux
GNU/Linux using libusb 0.1.7 and later
Asynchronous card movement
To be able to use the asynchronous card movement notification
(instead of active polling every 400ms) you need to use libusb >
0.1.12 (not yet available) or use this patch. See the discussion on
the MUSCLE list.
Leopard (10.5)
Mac OS X Leopard (10.5) is supported without patches. To build
the driver you need to extract the archive and do:
$ ./MacOSX/configure
$ make
$ sudo make install
NOTE: The execution of ./MacOSX/configure will fail if
you have a space character in your current working directory
pathname.
NOTE: Apple's version of pcsc-lite installed with Leopard has
many bugs and problems. See LeopardBugs
for a list of known bugs.
Tiger (10.4)
Mac OS X Tiger (10.4) uses an old pcsc-lite with some problems:
- A missing call to IFDHSetProtocolParameters() so the reader
is not configured correctly regarding to the card ATR.
- A wrong API for SCardControl() so you can't use a pin pad
reader or any other feature provided by SCardControl().
- No way to generate a cold reset. Only a farm reset is
possible. Uncomment the line #CFLAGS="$CFLAGS
-DFAKE_CARD_CHANGED" in MacOSX/configure to
fake a card movement after a reset to simulate a cold
reset. Note that SCardReconnect() will then fail with
SCARD_W_REMOVED_CARD.
You can use this (now unmaintained) patch.
Solaris
The driver should work on Solaris.
I can't test is myself so patches are welcome if needed.
FreeBSD
This driver is known to NOT work on FreeBSD. I don't know why and
patches are welcome.
Other operating systems
It may or may not work.
Known problems
There is a bug in MacOSX libusb that crash the libusb library
when you unplug a reader and replug it in another USB socket. So if
you unplug a reader replug it in the same USB socket.
see my
bug report.
Gemalto provides its own CCID driver for its CCID readers. The
driver is available from Gemalto support
page. This driver is based on my own CCID driver. AFAIK it
is just an older version with a different version number. For
example the Gemalto driver version 1.2.4 is equivalent to subversion
revision 1862 from 2006-02-07 so before my 1.0.0 release.
I received some mails from users reporting bugs and asking for
support. I DO NOT SUPPORT the Gemalto driver. You can either ask
Gemalto support for support or use my own driver.
Available binaries
The drivers are also available as 
packages libccid
and 
source or package.
$Id: ccid.html,v 1.161 2008-05-08 12:55:36 rousseau Exp $
