Reusing Java Keystore when accessing a smartcard on Windows Reusing Java Keystore when accessing a smartcard on Windows windows windows

Reusing Java Keystore when accessing a smartcard on Windows


Yes, I have seen this before.

I was developing the front end and middleware for the Portuguese ID card to be used online and one particular feature was to be able to sign more than one file (electronically sign) and this was the exact behaviour we had!

The security model on smartcards ensure that one authentication lasts only one action. Signing a file is one action so we had to cache the authentication details (PIN code) and loop over the authentication procedure for every file we wished to sign.