直接在智能卡上生成密钥对？
此视频声称能够生成密钥对直接位于智能卡上，因此私钥永远不会离开卡。此操作对所有智能卡都是通用的，还是仅部分智能卡支持此操作？
This video claims to be able to generate a key pair directly on the Smartcard so the private key never leaves the card. Is this operation common to all smartcards, or do only select smartcards support this?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
这就是所谓的板载密钥生成，实际上卡自己生成密钥，并且私钥永远不会离开智能卡，除了标记为不可导出的密钥之外，卡本身无法导出它，它没有任何功能，不知识如何做到这一点。
许多智能卡（当然带有加密处理器）支持此功能，但不是全部，而且无论如何，这是一项昂贵的功能。大多数智能卡供应商都出售此类卡。
this is called on-board key generation, indeed the card generates itself the keys and the private key will never leave the smartcard, besides of the key marked as not exportable, the card itself is unable to export it, it has no function, no knowledge how to do this.
many smartcards ( of course with a cryptoprocessor ) support this but not all and anyway this is an expensive feature. Most smartcard vendors sell such cards.
大多数加密智能卡除了存储外部生成的明文密钥之外，还能够在卡中生成密钥，这是加密智能卡的主要用途。
有些卡不允许导入明文密钥，有些允许导出卡上生成的密钥，有些卡可以导入/导出包装的（用另一个密钥加密的）私钥，因此实际的私钥永远不会在不受信任的环境。
请访问 http://www.opensc-project.org 了解有关卡片和软件的更多信息。
Most cryptographic smart cards are able to generate keys in the card in addition to storing externally generated plaintext keys, that's the main purpose of cryptographic smart cards.
Some cards don't allow importing plaintext keys, some allow exporting keys generated on the card, some card can do import/export of wrapped (encrypted with another key) private keys, so that the actual private key would never be in clear in an untrusted environment.
Have a look at http://www.opensc-project.org for a further pointers on cards and software.
智能卡只是卡上的芯片，因此您可能想询问加密智能卡。
我从未使用过加密智能卡，但这听起来像是此类智能卡的完全合理的功能，因为它们通常用于身份验证和加密，而身份验证和加密通常使用私钥来实现。
加密智能卡的优点通常在于其中存储私钥。这是为了防止密钥被泄露，因为即使读取智能卡的计算机被泄露，智能卡也是安全的，私钥也是安全的。
A smartcard is just a chip on a card, so you probably want to ask about cryptographic smart cards.
I have never worked with cryptographic smart cards but that sounds like a completely reasonable functionality of such smartcards since they are intended usually for authentication and encryption which usally use private keys for that.
The advantage of cryptographic smart cards usually lies in that, that the private key is stored in it. That is intended to prevent the compromise of the keys because even if the computer, that reads the smartcard, is compromised the smartcard is safe and the private key is safe too.