Massimiliano Pala wrote: >> C_DigestInit, C_DigestUpdate, C_DigestFinal. > > Same as above. Anyhow thanks for the pointers, I will look into those and > pick the best ones. If the functions were provided via KMF and an hardware > token is used, then this would use the hardware implementation instead the > software one... maybe faster (the same argument can be made for the random > generator---hardware implementations are better than software, usually).
For getting access to hardware you MUST use the PKCS#11 API, see my other email for how easy this is when you already use KMF. By using the PKCS#11 handle you extract from the KMF handle you will be using the hardware token you originally passed to KMF (or the default one via the libpkcs11 Metaslot in some cases). -- Darren J Moffat
