Infineon RSA Key Generation Issue
So this is only a problem if you generate a key directly on your card instead of uploading it? Nothing else?I don't really understand why you would do that since there's no way to extract the key from the token once generated. It means that you have no backup. For this reason I always generate my keys on a trusted, offline computer, make a few backups and then upload it on the token. I guess that's one more reason to do so, at least you don't have to trust the RGN  of the device.