The standards we work to, in plain language.
Solutions tell you what we solve. Technologies tell you how — the protocols, applets, chips, and specifications we build with day-to-day. Each section links to the products that depend on it and the blog posts that go deeper.
JavaCard
Bytecode-based applet platform that runs on most secure elements. JavaCard 3.x APIs, CAP file format, applet lifecycle, install parameters, transient memory.
Secure Elements
Tamper-resistant chips that hold keys and run cryptographic operations in hardware. SE vs TEE vs TPM vs HSM — what each is good for and where they fail.
FIDO & WebAuthn
Phishing-resistant authentication built on public-key cryptography. CTAP1 / CTAP2, attestation, AAGUIDs, resident credentials, MDS.
DESFire
ISO/IEC 14443 contactless, MIFARE DESFire EV1/EV2/EV3 authentication, session keys, TMAC, key diversification. Where the chip says “91 AE” and you need to know why.
Secure Access Module
SAM-AV3 architecture, host-to-SAM protocol, key derivation, transit validator integration. The silicon that makes offline trust possible.
Reader / Card / SAM Flow
End-to-end sequence diagram of what happens when a card is tapped on a SAM-backed reader. Every APDU, every session key, every TMAC.
WebAuthn
W3C WebAuthn level 2, attestation statement formats, COSE keys, user verification, AAGUID lookup, MDS. The browser side of FIDO2.
CTAP2
Client-to-Authenticator Protocol v2.1. CBOR-encoded commands, PIN/UV auth protocol, large-blob, credBlob, configurable PIN policy.
Attestation
How an authenticator proves which kind of authenticator it is — attestation statement formats, AAGUIDs, packed / fido-u2f / tpm formats, MDS verification.
Passkeys
Multi-device credentials and the device-bound vs synced credential distinction. Where passkeys make recovery easier and where they soften enterprise assurance.
eSIM & eUICC
Telecom-grade embedded identity, eSIM/eUICC architecture, SGP.22 / SGP.32, profile lifecycle — explored on the dedicated Ambimat eSIM Initiative property.
From a technology to a product to a tool.
Every technology page lists the products that depend on it, the relevant blog posts, and any utility tools that might save you fifteen minutes today.
| Technology | Products | Tools | Pillar post |
|---|---|---|---|
| JavaCard | OnePass Card, JavaCard Applets | CAP Inspector, SCP03 Walkthrough | JavaCard from first principles |
| FIDO | OnePass Card, OnePass USB Key, BioKey | WebAuthn Attestation, COSE Key | Implementing FIDO2 |
| NFC & DESFire | Tappable, OnePass Card | NDEF Decoder, DESFire Status | DESFire EV3 in production |
| eSIM | eSIM Initiative | ICCID, EID | eSIM RSP architecture → |
| APDU | All card products | APDU Parser, SW1/SW2 Lookup | APDU from first principles |