Hi,

> I just forgot to specify the use cases, It would be to make a learning of the 
> global operation of a PKI with key backup in a keystore, and run on a PI 
> Raspbérry. This is not for professional use, the Atec is limited to 16 keys
> 
> In fact OpenSSL is able to read and write in an AtecC508 in I2c. 
> https://github.com/MicrochipTech/cryptoauth-openssl-engine

If you can perform operations with OpenSSL using the device it should be 
possible to write a driver for OpenXPKI supporting this chip, however, this 
looks like an overly complicated project to me.

If I had this problem I'd probably have a look at more convenient hardware 
which is directly supported by OpenSSL/OpenSC, for example this: 
https://www.smartcard-hsm.com/features.html 
Note that I don't have any personal experience with this device. However, it 
seems to tick some of your boxes (ECC, key backup) and has PKCS#11 support so 
in theory it should be possible to get it to work with OpenXPKI. But don't take 
my word for it.

Cheers

Martin



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to