PuTTY wish smartcard-auth

Home | Licence | FAQ | Docs | Download | Keys | Links
Mirrors | Updates | Feedback | Changes | Wishlist | Team

It's been suggested that PuTTY could use RSA keys held on a smartcard for authentication. This would require interfacing with smartcard APIs and suchlike, and might be an application for the MDPI.

Alternatively, it might be better to integrate smartcard support into an SSH agent, either as part of Pageant or as a plug-in replacement for it. After all, the purpose of a smartcard is to generate cryptographic signatures on demand, which is what an SSH agent does too.

Some patches we've seen (links are on our Links page):

• <200409231510.55383.kstef@mtppi.org>
  Patches against PuTTY/Pageant 0.55 to use PKCS#11 libraries (tested with OpenSC)
  These patches can be found in opensc-project.org's contrib directory. There is a packaged version called the Smart Card Bundle.
• <300242548@web.de>
  Patch with extended key file format that uses external (PuTTY-specific?) DLL
  A compiled binary called PuTTYcard can also be found in opensc-project.org's contrib directory, although confusingly it apparently doesn't use OpenSC.
• <1673247798@web.de>
  ... which was replaced by a directly smartcard-enabled Pageant.
• PuTTY SC uses PKCS#11.

Audit trail for this wish.