On Thu, Dec 16, 2010 at 10:24, David Woodhouse <[email protected]> wrote: >> More to that, OpenSSL since late 0.9 versions has proper support to >> load crypto engines supporting other cryptography schemes. In >> particular, this is important for supporting Russian and Chinese >> cryptography standards. Neither of competing options has such feature >> and support -- not at least for Russian crypto. > > There are no PKCS#11 modules for Russian crypto standards? That seems > odd. There are proprietary ones, of course.
http://cryptocom.ru/OpenSource/OpenSSL_eng.html adds more to the context. The code is in OpenSSL 1.0 already. Here is the (year's old) discussion on NSS and PKCS#11: http://old.nabble.com/Rus-GOST-89-td25395627.html It required to have few additions to PKCS#11 spec which was done last year. I'm not aware about open sourced version which does it as PKCS#11 module, currently known patches are in works to get into softoken of NSS -- https://bugzilla.mozilla.org/buglist.cgi?quicksearch=518787,519432,608725 -- / Alexander Bokovoy _______________________________________________ MeeGo-dev mailing list [email protected] http://lists.meego.com/listinfo/meego-dev
