I see very limited documentation on how exactly CryptoTokenKit can detect the readers and fetch certificates from smart card. That’s because detecting the reader and fetching the certificates is done by the CTK appex, and how it does that is entirely up to it. Consider my YubiKey 5 NFC. It has multiple hardware interfaces, including USB and NFC. If I plug it into the USB-C port on my iPad, using a standard USB to USB-C adapter, it Just Works™. The token supports PIV and iOS has built-in PIV support. OTOH, if I try to use it over NFC, I must install Yubico’s app so that its CTK appex can route the request to the token’s NFC interface. If we want to fetch the certificates from smart cards connected via Bluetooth/lighting port, do we have to write an CryptoTokenKitExtension app? That depends on the token’s vendor: If the vendor has already written a CTK appex, your app can talk to the token that way. This is exactly what happens when I use my YubiKey over NFC. If not,
Topic:
Privacy & Security
SubTopic:
General
Tags: