Re: PKCS11/Cryptoki Spec Question

[Bob Relyea]

Wong Timothy wrote:
All:
    I am trying to implement cryptoki functions and had a few
questions.
1) When a user successfully log's in, he opens a session.  How do I
know if a session is RO or R/W?
 

Actually the session is penned before he logs in. Cryptoki requires a 
session ID on login.

Once the user is logged in on one session, he is logged in on all the 
sessions. Section 6.7 of the PKCS #11 manual available from 
ftp://ftp.rsa.security/pub/pkcs-11/v2-20/pkcs11v2-20.pdf describes in 
detail the interactions between login state and sessions.

2) FindObjectsInit(...) takes a template of attributes.  If a
CKA_TOKEN attribute is not set, do I look for objects in both the
session and token?  Do I always search for object in both session and
token levels?
 

Yes, if CKA_TOKEN is not set, then you need to return all matching 
objects whether they are token or session objects. NOTE: in cyrptoki 
parlance 'token' means persistent and 'session' means temporal.

Thanks,
Tim
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto
 

_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto