[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] QEMU as a "virtual smart card"?
From: |
Laurent Vivier |
Subject: |
Re: [Qemu-devel] QEMU as a "virtual smart card"? |
Date: |
Wed, 02 Sep 2009 00:27:02 +0200 |
Le lundi 31 août 2009 à 18:08 +0200, Bud P. Bruegger a écrit :
> Hello everyone,
>
> we are thinking of a possibly "exotic" use of QEMU and would like to
> ask your advice on whether we are going in the right direction.
>
> We are pondering of how to use a virtual machine to have some security
> features normally associated with hard tokens such as smart cards.
>
> In particular, one of the key concepts of smart cards is that they can
> store secret keys that never leave the device but can only be used by a
> trusted and protected internal CPU for encryption/signing.
>
> At least looking naively at QEMU, it seems that its CPU and RAM are
> well protected from the host operating system--in a way to say make it
> practically impossible for some malware to extract the secret key used
> in a virtual machine.
>
> Is this a valid conception of what QEMU does? How good is the
> isolation of a virtual machine from the host operating system.
>
> We are also interested in the isolation of input devices, in
> particularly the keyboard as to prevent PIN sniffing. My "naive"
> impression is that key logging for a PS/2 keyboard is probably more
> difficult than with a USB keyboard. Is there any thruth to my
> misconception?
>
> Finally one last question questions:
>
> * Is there any way of getting exclusive access to an USB pen drive
> from a virtual machine, preventing the host operating system to say take
> an image of the content?
>
> many thanks in advance for any input and illuminations!
In fact, you want to do that: http://www.myglobull.com/ ?
Regards,
Laurent
--
--------------------- address@hidden ----------------------
"Tout ce qui est impossible reste à accomplir" Jules Verne
"Things are only impossible until they're not" Jean-Luc Picard
- [Qemu-devel] QEMU as a "virtual smart card"?, Bud P. Bruegger, 2009/09/01
- Re: [Qemu-devel] QEMU as a "virtual smart card"?,
Laurent Vivier <=
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Jamie Lokier, 2009/09/01
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Blue Swirl, 2009/09/02
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Bud P. Bruegger, 2009/09/04
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Blue Swirl, 2009/09/03
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Paul Brook, 2009/09/04
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Lennart Sorensen, 2009/09/04
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Bud P. Bruegger, 2009/09/04
- Re: [Qemu-devel] QEMU as a "virtual smart card"?, Jamie Lokier, 2009/09/04
[Qemu-devel] Re: QEMU as a "virtual smart card"?, Paolo Bonzini, 2009/09/02