Administrating The Cryptographic Key With The Smart Card; Creating The Cryptographic Key - Digittrade HS256S User Manual

Note: The DIGITTRADE HS256S only accepts 8-digit PINs. Do not use a trivial PIN
like ascending or descing series of numbers or user-specific PIN like your phone
number or date of birth.
4. Administrating the cryptographic key with the
smart card
The cryptographic key is created and encrypted on a certified smart card. After the
PIN has been correctly entered the cryptographic key is transferred to the encryp-
tion module of the HS256S to de-/encrypt the data. The cryptographic key can be
copied to other smart cards using the storage device. The cryptographic key can
be created, changed or deleted using the smart card PIN.
The function to administrating the cryptographic key (creating, destroying and
copying) only works with smart cards that have the DIGITTRADE HS256S Java
Card Applet. The HS256S is (by default) distributed with 2 of the following type
smart cards Oberthur Cosmo 64 v5.4 (NIST-certified, FIPS 140-2 Level 3). Other
Java based cards which are BSI or NIST certified and approved for the DIGITTRADE
HS256S could be intergrated in the future.
Note: The HS256S is delivered preconfigured and ready-to-use. For security rea-
sons it is very important that the cryptographic key is changed and the smart cards
for the HS256S are re-initialised.

4.1 Creating the cryptographic key

With the help of DIGITTRADE HS256S a cryptographic key can be created on an
authorised smart card. The integrated certified random number generator creates
random and safe cryptographic numbers.
63