- security-devroom - lists.fosdem.org

[security-devroom] Smartcard workshop at FOSDEM 2012
by Jean-Michel Pouré - GOOZE 31 Jan '12

31 Jan '12

Dear all, Just a few information about the smartcard workshop: http://fosdem.org/2012/schedule/event/smartcard_workshop The workshop is intended for people interested in discovering smartcards, security tokens and hardware cryptography. It will be based on the OpenSC framework: http://www.openSC-project.org Schedule: Sunday, 13:00 to 15:00 * Discover the hardware The workshop will start with a donation of 50 ePass2003 free developer kits. The kit includes an ePass2003 and a CD with all documentation: http://www.gooze.eu/feitian-epass-2003-free-software-developer-kit Donation of tokens is always kind of "rush" and should take around 15 minutes. Then the schedule should be: * OpenSC quickstarter guide: http://www.gooze.eu/printpdf/book/export/html/36 should take around 45 minutes We will cover installation and basic OpenSC commands. * Using SSH with smartcards: http://www.gooze.eu/printpdf/book/export/html/193 should take around 15 minutes * Using smartcards with Firefox: http://www.gooze.eu/printpdf/book/export/html/145 is a tutorial around CAcert should take around 15 minutes * Using smartcards with TrueCrypt: http://www.gooze.eu/printpdf/book/export/html/203 should take around 15 minutes * Questions and answers The slides should be based on a tutorial given at Debian day in Paris and will be available under a Free license: http://www.gooze.eu/sites/default/files/slides/debian-miniconf-paris-2010-v… Kind regards, -- Jean-Michel Pouré - Gooze - http://www.gooze.eu

1 0

[security-devroom] Fosdem schedule ready - last minute change
by Kai Engert 30 Jan '12

30 Jan '12

Hi everyone, (a) Greetings from Martin, whom I've just spoken to, and who asked me to send this email. (b) Martin has worked with Fosdem organizers and the schedule for the Security and Hardware Crypto room is ready. Saturday: http://fosdem.org/2012/schedule/track/hardware_cryptography_devroom Sunday: http://fosdem.org/2012/schedule/track/security_devroom (c) Soon after the initial schedule was announced, I noticed a conflict between the "CACert / Trust" talk and the talk I'll be giving in the Mozilla room, also about the consequences of the DigiNotar incident, from a Mozilla and NSS code perspective. After talking with Martin and the Fosdem organizers on IRC, we have agreed to avoid the conflict between the talks and make a last minute switch of the schedule. The schedule shown on the Fosdem.org website has already been updated, and no longer has the conflict. So, only for those of you who had looked at the schedule earlier than this email, we had switched the 15:00 and 16:00 talks. The updated Saturday schedule is: 15:00 yaSSL 16:00 CAcert I hope this change was in everybody's interest. Thanks and Regards Kai

3 2

[security-devroom] Fosdem 2012, donation of 50 ePass2003 to security devroom
by Jean-Michel Pouré - GOOZE 19 Jan '12

19 Jan '12

Dear all, Just a quick note that GOOZE will be attending FOSDEM security devroom (day one) and we will donate 50 ePass2003 tokens to the assistance. http://www.gooze.eu/epass-2003 People interested will only need to register an online form during the security devroom and I will hand them free tokens. Hoping this can make the devroom a success. Kind regards, -- Jean-Michel Pouré - Gooze - http://www.gooze.eu

1 0

[security-devroom] FOSDEM 2012 Submission
by Anders Rundgren 05 Jan '12

05 Jan '12

Hi Guys, If you have a devroom and there is time left, I would like to elaborate on "Open Security Hardware". My BIO: Anders is a seasoned developer and entrepreneur who has worked exclusively with Internet-based systems since 1995. Anders is currently a consultant at PrimeKey solutions with enrollment to EJBCA as a core working field. Open Security Hardware is an effort creating a unified crypto container that works equally well in traditional connected tokens (e.g. smart cards) as in embedded systems like mobile phones. The most important part of the plot is the integration of an end-to-end-security token provisioning scheme that is based on an enhanced Internet browser. The 30min talk will elaborate of the technical details behind the paper: http://webpki.org/papers/keygen2/sks-keygen2-exec-level-presentation.pdf Anders

1 0

[security-devroom] Talk and workshop: Deployment and Use of X.509 in Free Software Components
by Бранко Мајић 08 Nov '11

08 Nov '11

Hello, I'd like to submit a proposal for a talk and maybe a workshop if resources permit. Contact ======= Name: Branko Majic E-mail: From mail header Biography ========= I'm a system integration engineer/system administrator, Free Software enthusiast and supporter. I've been dealing with deployment of various Free Software solutions (integrating them often with proprietary solutions), and for the past two years I've dealt a lot with security-related technologies (mainly X.509, some Kerberos, and integration/installation of different solutions with those). Talk Info ============ Duration: Depending on topics I'd cover, 30-40 minutes The talk will cover the use of X.509 in available Free Software applications, the obstacles that integrators are bound to face, and the way the integration process might be improved. The talk should also cover some areas which are currently lacking in terms of implementation in Free Software projects. The talk is more oriented towards the system administrators/integrators. Workshop Info ============= The workshop should include a practical demonstration of deployment of X.509 infrastructure, integration of various services to use X.509 certificates and infrastructure, with demos provided with virtual machines. Purpose is to demonstrate the functionality in Free Software related to X.509, primarily in terms of enterprise-readiness of such software. Additional Information ====================== The talk and workshop will be heavily based on an online book I'm working on which can be found here: http://majic.rs/book/free-software-x509-cookbook I might have some trouble with the virtual environment, though, since I don't have a sufficiently powerful laptop to have it running. If anyone has ideas or could donate a machine with enough CPU power/RAM for the duration of workshop, I'd be very grateful :) -- Branko Majic Jabber: branko(a)majic.rs Please use only Free formats when sending attachments to me. Бранко Мајић Џабер: branko(a)majic.rs Молим вас да додатке шаљете искључиво у слободним форматима.

1 0

[security-devroom] OpenSC @ FOSDEM 2012 & resurrection of security-devroom list
by Martin Paljak 01 Nov '11

01 Nov '11

Hello, 1. I filed for a security devroom again, I hope it will be accepted (hey, they even resurrected the mailing list). The theme of the devroom is "(hardware) security / crypto" 2. The scheme is the same as last year, except there should be a (different) room for two days, where the second day will be pure hands on hacking. I plan to bring a bunch of different hardware and I hope to see many people from different projects and hopefully we can even have a short hackathon there. 3. Please distribute at relevant lists/forums/groups links - to the mailing list at [1] - to the wiki [2] 4. If you have a talk proposal, please send a short description of it to the same list or add it to the currently empty wiki page [2] following basically the same CFP as last year [3]. Also, feel free to voice your interests either on the list or in the wiki. For example, I'm personally interested in hearing something about CESECORE [4] and Android(/smart cards, like [5]), hopefully this helps to send the word around that we actually could see people associated with such efforts. Best, Martin [1] https://lists.fosdem.org/mailman/listinfo/security-devroom [2] http://www.opensc-project.org/opensc/wiki/FOSDEM2012 [3] https://www.opensc-project.org/opensc/wiki/FOSDEM2011/CFP [4] https://www.cesecore.eu/ [5] http://code.google.com/p/seek-for-android/ -- @MartinPaljak +3725156495

2 1

[Security-devroom] FOSDEM2011: Thank you!
by Martin Paljak 17 Feb '11

17 Feb '11

Hello all, FOSDEM was a great event and the security devroom was no exception. I'd like to thank again everyone who participated in the devroom, hopefully the time you spent there was well worth it! All slides and video recordings should be now available from the devroom wiki page: http://www.opensc-project.org/opensc/wiki/FOSDEM2011#Schedule Except for some external links for videos, the wiki page should remain as is for future reference, feel free to link to it. This is my final message to this mailing list, which shall decease some time in the nearest future. But don't hesitate to contact me (or anyone else you met at FOSDEM) directly for further questions or comments, as collaboration and communication is the key to success in FOSS crypto :) Best wishes, Martin -- @MartinPaljak.net +3725156495

2 2

[Security-devroom] Slides: Trust assertions and other PKCS#11 Glue
by Stef Walter 09 Feb '11

09 Feb '11

Here are the slides I used for my talk: https://www.opensc-project.org/opensc/attachment/wiki/FOSDEM2011/trust-asse… It was awesome meeting you all and discussing things together. All the best! Stef

1 0

[Security-devroom] FOSDEM event
by Jorge Martín 09 Feb '11

09 Feb '11

Dear all, good morning! Thank you very much for the organization of crypto&hardware crypto devroom in FOSDEM event. It was really very interesting for me. Thanks Martin for your advices about opendnie and testing virtual machines and Aris for the conversation we have had. On the other hand, please accept my I apologies for not having dinner with you. Thank you and kind regards. -- Jorge Martín Técnico de Proyectos/Projects Technician Fundación CENATIC Centro Nacional de Referencia de Aplicación de las TIC basadas en fuentes abiertas / National Competency Centre for the application of open source technologies Avda. Clara Campoamor, s/n 06200 Almendralejo (Badajoz), SPAIN Tlf +34 924 677 316 Fax +34 924 666 896 jorge.martin(a)cenatic.es http://www.cenatic.es Sus datos figuran en un fichero automatizado propiedad de “Fundación CENATIC”. Si desea acceder a sus datos, rectificarlos, cancelarlos u oponerse a su tratamiento, diríjase a “Fundación CENATIC”, Avda. Clara Campoamor, s/n, de Almendralejo, provincia de Badajoz, C.P. 06200, o enviando un email a legal(a)cenatic.es

1 0

[Security-devroom] recordings
by Kai Engert 08 Feb '11

08 Feb '11

Hi, recordings of the talks are now available in WebM. I think it will take a while until Fosdem makes things available at video.fosdem.org I've created a bittorrent. http://kuix.de/misc/fosdem_2011_talks_webm.torrent Please try it, and report back if you see a failure. Please help me to save bandwidth and keep seeding after your download finished. Cheers Kai

1 1