Jean-Michel Pouré - GOOZE wrote: > Is there a way to store a 3DES key on smartcard, so it cannot be > extracted but still be usable by OpenSSL?
Maybe some card supports it, but usually it is undesirable for performance reasons. Symmetrical ciphers are usually intended for large amounts of data, so performance is more critical than with asymmetrical, and cards are *very* slow in comparison to the CPU. When creating a signature it may be OK to have one or a small number of relatively slow operations. "RSA encryption" often uses a symmetrical cipher (AES, DES, etc) for actual encryption of data, and then encrypts only the key for that cipher using RSA. //Peter
pgp9OPfvSiltx.pgp
Description: PGP signature
_______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel