pkcs11 — archive

[Stef Walter]

On 11.04.2013 18:15, Michael StJohns wrote: > On 4/11/2013 1:23 AM, Stef Walter wrote: >> On 10.04.2013 01:35, Michael StJohns wrote: >>> Attached is an edit of the appropriate sections of PKCS11 v2.30 to add >>> support for CKA_PUBLIC_KEY_INFO. >>> >>> Additions are highlighted. Assuming this is acceptable, I'll provide >>> the appropriate edits for the public key sections to describe the >>> encoding of the public key info field in SubjectPublicKeyInfo >> Can we have this attribute on X.509 certificates as well? That would be >> a good way of detecting whether a certificate and key match >> cryptographically. > > I would tend to gravitate towards no as the certificate already contains > exactly that information. On the other hand if you want to use it in > the template for FindObject it may make sense. Yes, that's exactly the use case. Stef