Smartcards

• Cryptographic smartcards store keys and incorporate a cryptographic engine

• Private keys are never exposed

• Private keys cannot be copied off the card

• • Private keys may be copied onto a card or generated

• Protected by a PIN

• • Automatic lockout after failed retries

• Requires lengthy physical possession to compromise

• Backup cards should be maintained in case of failure