Infineon RSA Key Generation Issue
So this is only a problem if you generate a key directly on your card instead of uploading it? Nothing else?<p>I don't really understand why you would do that since there's no way to extract the key from the token once generated. It means that you have no backup. For this reason I always generate my keys on a trusted, offline computer, make a few backups and then upload it on the token. I guess that's one more reason to do so, at least you don't have to trust the RGN  of the device.