Am Mittwoch 17 Juni 2009 09:23:55 schrieb Kroehnert, Andreas:
> after fixing the export the new engine works again fine with the our
> HSM. But I just tested the "slot_X-label-ABC" notation so far.
>
> On a different topic, are there any plans to allow the engine to use
> token/hsm stored Diffie Hellman Keypairs or Elliptic Curves? If not then
> this would be something I could start looking into.

patches would be very welcome. so far noone had a smart card with anything
besides RSA, so only RSA is implemented in most parts of the chain (openct
or pcscd + driver, opensc, libp11, engine_pkcs11, and other software using
opensc or a pkcs#11 module).

also many years ago there was no standard for elliptic curves. did that
change? and are there free curves/algorithms/... that can be used by
everyone, or is elliptic curve a copyright/patent minefield?

even if there are issues, I guess implementing support in engine_pkcs11
and libp11 would be ok, as we are only the middle layer passing data
from one API to another. (I guess the issues would only affect software
and hardware implementations - e.g. openssl, openssh, smart card vendors,
but not the higher level software stacks including all projects hosted
on opensc-projects.org.)

there are no plans from our side - at least I don't remember anyone working
on this, and most projects are more or less asleep - we fix small issues and
apply patches, but there is no major development happening right now.

Regards, Andreas
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to