Dear all,

Is there a way to store a 3DES key on smartcard, so it cannot be
extracted but still be usable by OpenSSL?

We wrote this;
http://www.gooze.eu/howto/smartcard-quickstarter-guide/scenario-5-importing-3des-key

pkcs11-tool -v --module /usr/lib/opensc-pkcs11.so --slot 1 --label
"3deskey" --write-object 3des.key --type data --private --login --pin
0000 

But this is not really a suitable solution to store a 3DES key securely.
Is there a best solution?

Can 3DES keys be generated on card? (I guess NO)?
Can 3DES keys be imported as unextractible keys (like RSA private keys)?

Kind regards,
-- 
                  Jean-Michel Pouré - Gooze - http://www.gooze.eu

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to