As I did with the previous major versions of Mac OS X Yosemite, Mavericks, Mountain Lion (and Lion) I will list changes in El Capitan regarding the smart card world.
API Differences between 10.10 and 10.11The differences are listed in the developer page OS X El Capitan v10.11. The page only document big changes. The smart card changes are not listed there :-)
A complete list of API changes is at OS X v10.11 API Diffs. Regarding the smart card world we have:
I note two sets of new methods:
TKSmartCardUserInteractionFor*. It looks like Apple wants to provide a nice User eXperience regarding PIN management.
I hope Apple will provide more documentation than the .h header file and some code samples.
I will try to rebuild my Crypto Token Kit Objective-C and Swift examples on El Capitan to check if they still work.
PC/SCSince Yosemite (10.10) the PC/SC layer is no more a fork of pcsc-lite. So comparing versions with pcsc-lite is useless.
$ cat /System/Library/Frameworks/PCSC.framework/Versions/A/Resources/version.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>BuildAliasOf</key> <string>CryptoTokenKit</string> <key>BuildVersion</key> <string>13</string> <key>CFBundleShortVersionString</key> <string>8.0</string> <key>CFBundleVersion</key> <string>1</string> <key>ProjectName</key> <string>SmartCardServices</string> <key>SourceVersion</key> <string>79001001000000</string> </dict> </plist>
The BuildVersion changed from 1 on Yosemite to 13 on El Capitan, and SourceVersion changed from 22020004000000 to 79001001000000. I have no idea what the SourceVersion "number" is.
It looks like Apple made 12 builds of the PC/SC framework since Yosemite 10.10.
- SCardTransmit (pioSendPci not checked)
- SCardGetStatusChange blocks forever
- OS X Yosemite bug: SCardConnect blocks in SCARD_SHARE_SHARED mode
I updated my blog article OS X Yosemite and smart cards: known bugs.
Maybe new bugs will be found on El Capitan. But I have not yet found any after just a few hours of tests.
CCID driverDriver version 1.4.14.
No change since Yosemite.
$ grep -A 1 CFBundleShortVersionString /usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle/Contents/Info.plist <key>CFBundleShortVersionString</key> <string>1.4.14</string>
New driver locationThe System Integrity Protection (SIP) introduced in El Capitan impose that custom PC/SC drivers are now installed in /usr/local/libexec/SmartCardServices/drivers/.
Only the CCID driver provided by Apple is still in /usr/libexec/SmartCardServices/drivers/.
TokendBecause of SIP, the tokend needs to be installed in /Library/Security/tokend/ now instead of /System/Library/Security/tokend/.
The tokend and CDSA are still usable. I just fixed the PKCS11.tokend so that it looks for PKCS#11 libraries in /usr/local/lib/pkcs11/ if /usr/lib/pkcs11/ does not exist (as it is the case on El Capitan because of SIP again).
ConclusionMost of the remaining PC/SC bugs fixed.
tokend still usable.
Some new Crypto Token Kit methods.