Aladdin offers the eToken PRO, an USB crypto token with 32k or 64k memory and support for RSA keys up to 2048bit key length.

Open-source eToken R2 Implementation. This project intends to provide open-source support for Aladdin's eToken R2 under Linux and other. 2 OpenCT Driver. SafeNet Authentication Client (formerly eToken PKI Client) is the desktop software that manages SafeNet's eToken and iKey authenticators. And Linux, so your. Aladdin eToken PKI Client (Linux) ReadMe 2 2. Licensing The use of this product is subject to the terms and conditions as stated in the End User. Download the new client software. To “Install SafeNet eToken PRO on Ubuntu. Described on Alladin howto page http://www.aladdin-rd.ru/support/faq/etoken.

The eToken PRO is fully supported by OpenSC and is well tested.

Download the latest Aladdin eToken device drivers (Official and Certified). Aladdin eToken drivers updated daily. Download Now. Etoken software, free downloads and reviews. Download Etoken Software. Aladdin eToken R2 Linux Driver v.1.0 Linux user-space implementation of Aladdin's eToken. EToken: Strong. Hardlock Driver Installation 32/64bit. (Driver, Server, Aladdin* Monitor, Aladdin* Diagnostic, end user manual).

Note: some 72k Java cards do not work.

Models

The precise model of your token can be determined from the text moulded in the plastic enclosure.

Unsupported models

There is a rare version of the Aladdin eToken PRO with a G&D Starcos smart card inside. This version never went into mass production as far as we know, and is not supported by OpenSC.

Also there are some smart cards with the “Aladdin eToken” Name on them too. These cards are too old, they are not supported by OpenSC, as they lack some required features.

eToken R1 and R2

Those were the first generation of tokens produced. They use a proprietary protocol for communication between the host and token.

  • USB IDs: 0529:030b through 0529:042a
  • Memory: (?)
  • Maximum RSA key size: (?)
  • Crypto chip: (?)
  • On-Chip OS: (?)

eToken PRO 4.2B

Safenet Etoken Drivers Download

This is the second public release of the device, that use a proprietary protocol for communication. These can still (2009) be found on the cheap on EBay or otherwise.

  • USB IDs: 0529:0600
  • Memory: 32k
  • Maximum RSA key size: 2048 bits (it takes a long while to generate one such key, and the LED turns black while it does. Don’t panic!)
  • Crypto chip: Infineon
  • On-Chip OS: Siemens CardOS M4.2B

Aladdin eToken PRO 64k

  • USB IDs: 0529:0600 Vendor=0529 ProdID=0600 Rev=01.00
  • Memory: 64k (46506 Free)
  • Maximum RSA key size: 2048 bits
  • Crypto chip: (?)
  • On-Chip OS: CardOS V4.2B © Siemens AG 1994-2005
  • ATR: 3B F2 18 00 02 C1 0A 31 FE 58 C8 09 75
  • Vendor Site:http://www.safenet-inc.com/aladdin-content/etoken/devices/pro-usb/

eToken PRO v4.29

  • Microcontroller:Atmel AT90SC25672RCT-USB Revision D
  • Memory: 72KB EEPROM (64~67KB usable?; ~8KB reserved for firmware/patches?)
  • Software (default): GlobalPlatform v2.1.1, Java Card v2.2.2, Athena OS755 IDProtect v0106.×.x, Aladdin eToken Applet v1.x
  • USB IDs: 0529:0620
  • ATR: 3B D5 18 00 81 31 3A 7D 80 73 C8 21 10 30
  • FIPS:140-2 Level 2 for USB and smart card versions. Level 3 for HD (hardened) USB versions.

Supported Cryptographic Services

  • Random Number Generator:DRNG (ANSI X9.31 two key TDES deterministic RNG seeded with the hardware RNG)
  • Message Digests:SHA-1, SHA-256
  • Signatures:RSAPKCS#1 (1024- to 2048-bit in 32-bit increments)
  • Ciphers:TDES (112- and 168-bit ECB and CBC), TDESMAC (vendor affirmed), AES (128-, 192- and 256-bit ECB and CBC), RSA (1024- to 2048-bit in 32-bit increments)
  • On-Card Key Generation:RSAPKCS#1 (1024- to 2048-bit in 32-bit increments)
  • Key Establishment:RSA (1024- to 2048-bit in 32-bit increments [strength 80-bits for RSA 1024 to 112-bits for RSA 2048])

There seems to be three different physical versions available: the regular PRO, the PRO HD (a hardened version offering additional physical security compliant with FIPS 140-1 Level 3 requirements), and the PRO SC (a smart card). However, differentiating between the PRO and PRO HD is difficult, as there is little info specific to the HD version available online, and the image used in the FIPS Security Policy documents is identical for the PRO and PRO HD.

This device (and the others below) are compliant with the USBCCID (Chip/Smart Card Interface Devices) standard (see section “Smart Card Class” on http://www.usb.org/developers/devclass_docs).). As such, they don’t require a proprietary driver to work with OpenSC.

  • USB IDs: (?)
  • Memory: (?)
  • Maximum RSA key size: (?)
  • Crypto chip: (?)
  • On-Chip OS: Siemens CardOS M4.20 (?)

Support

Aladdin is maybe the oldest player in the USB token field, and their hardware and software predates the standards such as CCID and PKCS#15, so you can’t really blame them for not conforming to these standards (especially for older token hardware). See also the Thanks section below, they are a fair player!

Aladdin has an SDK with Documentation on their ftp server for public download, but to implement the OpenSC driver further documentation was necessary (by Siemens and available only under NDA as far as we know).

CardOS-based versions

CardOS versions up to and including M4.20 are supported. (Is CardOS M4.3b also working?) This includes all the CardOS-based token versions listed above except the evaluation boards. In order to make these work with OpenSC, one has to install the proprietary middleware; the proprietary key manager is not needed. See [#InstallationNotes below].

One minor misfeature of the Siemens CardOS M4 is that an RSA key cannot be used for both signing and decryption. OpenSC has implemented a workaround: software key generation and storing that key twice, once marked as decryption key and once marked as signing key. To enable this workaround specify “—split-key” on the command line, when creating the key.

Installation Notes

Aladdin provides their own software, which comprises both the middleware (necessary for all CardOS-based tokens) and the key-management tool (also for Linux (link outdated)) which is not compatible with PKCS#15. (However, as long as enough memory is available on the chip, it is possible to initialize the token with both OpenSC and this proprietary key manager, and thus install files and keys side by side – each software can then only handle their own structures.)

Mac OS X

Download the [ftp://ftp.aladdin.com/pub/etoken/PKI%20Client/PKI_Client_4_55_Mac/eToken_PKI_Client_4_55_Mac.zip PKIClient 4.55 software package]. If you are only interested in the middleware (and not the proprietary key manager), don’t install everything at once; rather, follow these steps:

1. unpack and mount the `pkiclient.4.55.41.dmg` file2. explore the `eToken PKI Client 4.55.mpkg` directory on it (Ctrl-click then “Show package contents”), then open “Contents” and “Packages”3. double-click on the following packages in this order so as to install them:
  • `etokenframework.pkg`: those are the shared libraries (that will go into `/Library/Frameworks/eToken.framework`) needed by all the other packages;
  • `etokendriversleopard.pkg` (for Mac OS 10.5.x) or `etokendriverstiger.pkg` (for Mac OS 10.4.x): this is the middleware, that goes under `/usr/libexec/SmartCardServices/drivers/eTokenIfdh.bundle/` . It consists of an auxillary daemon that will be run by ``pcscd`` in order to perform the necessary USB I/O.

To test this setup, plug your token in, then open a terminal and type the following commands:

`pcscd` should start chatting, and the diode on the token should turn on. If `pcscd` instead says:

it means that the middleware is corectly installed, but `etokenframework.pkg` is not. This happens when one installs the former first (!) In that case, run the `Uninstall eToken PKI Client 4.55` program from the .dmg image and start over.

Linux

Etoken

The middleware for Linux is available here: ftp://ftp.ealaddin.com/pub/etoken/Linux (link outdated) ; and a third party provides the “key-management tool for Linux” (you don’t need the latter if you just want your token to work with OpenSC).

Thanks

Big thanks to Aladdin, they sponsored an OpenSC workshop in 2003 by donating 30 Aladdin eToken PRO!

Big thanks to Startcom and Eddy Nigg for lots of time and support in adding support
for the Aladdin eToken PRO 64, for lots of testing and for donating one to us.

Big thanks to ASW, they donated two Aladdin eToken PRO 64, so we could test our support for
those Tokens (not yet released, will be included in the next release).

Big thanks to Josef Gillhuber from Aladdin. He donated two eToken PRO (32k and 64k) on LinuxTag 2006.

Thanks to Roman Stahl, he donated two Aladdin eToken PRO 32k (4.2B), so we could verify: they work fine too.

Is it a requirement that you use the token used for your taxes with its existing certificates and keys?
If not, I would suggest buying some other card that has Linux, Windows and MacOS support either from the
vendor or open source.

If you need to use that card, you either need to find documentation on the application that is used
on that card. A card is like a computer, the ATR describes some attributes about card, but not the
program it is running. Many governments that issue cards to citizens have some public documentation
on how the application on the card works. It usually describes the APDUs and file formats.

If you can find a working PKCS#11 module, great. The SAC file I looked contained /usr/lib/libeTPkcs11.so.
Based on the SafenetAuthenticationClient. Look for other SafenetAuthenticationClient packages from
GemAlto. The module is a PKCS#11 module. Mozilla, SSH and PAM can use PKCS#11 modules so its a good standard
to use.

OpenSC has many utilities that can work directly with most PKCS#11 modules and OpenSC has its own opensc-pkcs11.so
that can work with cards (with selected applications) that OpenSC supports.
(OpenSC also has utilities and other drivers that bypass PKCS#11 and only work with cards supported by OpenSC.)

All smartcard middleware use PCSC, this includes Windows, Linux and Mac. If you need to write OpenSC support for
some card and application a APDU trace of a working card can help. If the card works on Windows a USB trace with
the APDUs can also help. But some cards are now using Secure Messaging so the data in these traces is encrypted
and not very helpful.

On 5/1/2016 4:40 PM, Ioan Eugen Stan wrote:

@qsantoshttps://github.com/qsantos have you tried version 9 from the link I gave?

Etoken Software


You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub #461 (comment)

Aladdin Etoken Driver Windows 10

Douglas E. Engert DEEngert@gmail.com