Incomplete serial number displayed for Token2 smartcard

[alphazo]

Serial Number Display Discrepancy

USB Token2 Hardware Tokens: Keyroost displays the full S/N printed on the device.

Token2 Smartcards: Only the last 8 digits of the S/N are displayed.

Note: This 8-digit serial number corresponds to the OpenPGP serial number.

[token2]

Yes, that is expected - OpenPGP does not allow full T2 serial number (but this should not be a problem, the first digits are not unique in any case, they are to identify the model [1])

The OpenPGP Card specification defines the card serial number as a 4-byte value. A 4-byte unsigned integer can represent values from 0 to 4,294,967,295 (0xFFFFFFFF)

Edit - still has to be unified across transports (TODO)

[1] https://www.token2.com/site/page/pin-firmware-feature-support-matrix-openpgp-fido2-otp-and-piv-across-releases

[alphazo]

I agree with the OpenPGP part since USB hardware tokens also display a short 8-digit S/N when calling gpg --card-status. My concern is about the S/N displayed in Keyroost, which is not specific to OpenPGP: USB hardware tokens show the full S/N, whereas smartcards only show an 8-digit S/N.

[token2]

I agree with the OpenPGP part since USB hardware tokens also display a short 8-digit S/N when calling gpg --card-status. My concern is about the S/N displayed in Keyroost, which is not specific to OpenPGP: USB hardware tokens show the full S/N, whereas smartcards only show an 8-digit S/N.

Yes, correct- I was just clarifying the SN differences for other readers

[alphazo]

Adding some nuance after finding out that the full S/N is effectivetly displayed for a Token2 smartcard, either via contact or contactless operation, when using the Token2 desktop dual interface reader (349e:0430).
The incomplete S/N is only seen when using other smart card readers (contact only) including a built-in Alcor Micro Corp. AU9540 smart card reader (058f:9540), external Identiv SCR3500 USB reader (04e6:5814) and Realtek Semiconductor reader (0bda:0165).

[token2]

Adding some nuance after finding out that the full S/N is effectivetly displayed for a Token2 smartcard, either via contact or contactless operation, when using the Token2 desktop dual interface reader (349e:0430). The incomplete S/N is only seen when using other smart card readers (contact only) including a built-in Alcor Micro Corp. AU9540 smart card reader (058f:9540), external SCM Micro SCR-3500 USB reader (04e6:5814) and Realtek Semiconductor reader (0bda:0165).

That explains why we did not notice the issue, we only used T2 reader. Will check

[framefilter]

Hello @alphazo! Thanks for using keyroost, most especially for taking the time to report issues. I’ll take a look and see what I can do to get this issue resolved based on your description of the problem.

[alphazo]

v0.7.7 seems to be fixing the problem. Is it okay to close the issue?

[My1]

curious why it shows the full SN on a T2 reader but not a generic one.