Java Card

You didn't even need it in the Google Wallet, although I think it works there as well.

And then we started getting into Java cards and Java cards are smart cards with a programmable interface on them.

And so you can actually have a hardware card that you can use to sign into your Mac to potentially also get into your building to potentially open up the lock on your front door.

And so once I'd gotten that working, then things got a little silly.

And it's designed to be used for a lot more user passes, wallet passes.

I think a lot of the lock manufacturers are looking at doing this because it's simpler than some of the other flows that are out there.

So if you have a smart card, a Java card to be more specific that you can program, you can actually put an Alero applet on there that lets you sign in.

You can also have it be a PIV applet.

This audio is presented by Hacker Noon, where anyone can learn anything about any technology.

How to load and run a Java card applet on real hardware, by Vitaly Gribko.

The walkthrough we kept coming back to was 25 years old.

We wanted one that reached the reader on our desk.

What this article covers.

In part 1 we covered the why, secure elements, threat models, and why TLS decent a microamp budget.

this part is the how taking a java card applet from source code to a real card through every layer that stands in the way we build a small applet called caller mac it receives a challenge from the host computes a mac over it with an aes key that never leaves the chip and returns the result A MAC, a message authentication code, is a short fingerprint that proves you hold a secret key.

It has nothing to do with a network MAC address.