Anders Rundgren wrote:
> I'm asking because Peter's idea

I think Jim deserves most of the credit. :) I just continued on the
chain of thought from you seeking a token to my questioning APDUs to
Jim's research and his comment about "something closer to pkcs11" to
land on USB/PKCS11.


> to emulate PKCS #11 directly is horrendous if the entire spec is to
> be followed but could turn out to be a no-brainer if you only need
> to enumerate keys, open, sign and close.

I think more is needed, but the legwork is finished in SoftHSM. It's
a soft p11 provider in a library with 2-clause BSD license.

It could certainly be made to run on a USB microcontroller. The
database is well abstracted, the crypto stuff not as much, but I
guess that could be solved by making a botan compatibility layer
for a suitable C crypto library.

Wedge USB in between the front and the back of the library - done! :)


//Peter
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to