❌ Compliance with the Assignment

[OTFlorian]

Concerning compliance with the assignment, we have recognized the following problems:

• The implementation cannot be converted under JavaCard convertor—a violation of (p. 11). (If yes, unclear how. Thus, opened as an issue #4.)
• The user cannot input the PIN to the application since it is hardcoded in the application—a violation of (p. 12).
• The PIN is not set to the applet during installation—a violation of (p. 14).
• The PIN is stored in the memory for the whole execution of the PC application—a violation of (pp. 12, 15).
• It is possible to start the next session without performing the key agreement—a violation of (pp. 12, 14, 15).
• APDU traces from channel establishment and message transfer were not provided—a violation of (p. 5).