Hi,

I try import a private key on the card that
already contains one private key without corresponding public key.

The result is that the IDs of the newly imported private key and 
corresponding public part
are not the same.

Sure, application that imported the second key
could supply some convenient ID for the both parts, private and public.

Nevertheless, IMHO, it would be nice, for the cryptographic objects (and 
maybe for the others)
to have the possibility of some unique ID calculated from the object 
itself, as it was discussed in thread:
'CKA_ID and pkcs15 ID' 05.09.2005 13:34 .

The idea is to have a choice of method to calculate the ID:
- SHA1 of the modulus (Mozilla style),
- SHA1 of public key (recommended by RFC2459)
- or the actual one byte ID (default).
Then use some additional profile option to indicate the method to be used.


Any objection if I implement it?

Kind wishes,
Viktor Tarasov.

-- 
Viktor Tarasov  <viktor.tara...@opentrust.com>

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to