Hi martin, I just forgot to specify the use cases, It would be to make a learning of the global operation of a PKI with key backup in a keystore, and run on a PI Raspbérry. This is not for professional use, the Atec is limited to 16 keys
In fact OpenSSL is able to read and write in an AtecC508 in I2c. https://github.com/MicrochipTech/cryptoauth-openssl-engine Cordially. ----------------------- Cédric Polomack http://www.secresys.fr 22 février 2019 14:06 "Martin Bartosch" <[email protected]> a écrit: > Hi, > >> Has the OpenXpki can store keys to an AtecC508 Keystore ? > > Well, the ATECC508 is a 8 pin crypto coprocessor chip with an I2C interface. > It comes in an > antistatic bag and a datasheet. > > To make it even accessible from an application level program on a Linux > system requires a > considerable hardware (e. g. some sort of HSM) and software stack (e. g. an > OpenSSL engine or a > PKCS#11 library). > > So: no, OpenXPKI cannot do that (and I fail to see under which circumstances > one would want to run > an Online CA with a crypto device attached via an I2C interface...) > > Cheers > > Martin > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users > > -- > Ce message a été vérifié par MailScanner > pour des virus ou des polluriels et rien de > suspect n'a été trouvé. _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
