Re: [opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-12-09 Thread Aleksey Samsonov
Hello, Douglas E. Engert wrote: Great for now. But in SVN pkcs15-sec.c:188,189: 187 switch (obj-type) { 188 /* FIXME -DEE GOSTR is misusing the sc_card_find_rsa_alg */ 189 case SC_PKCS15_TYPE_PRKEY_GOSTR3410: 190 case SC_PKCS15_TYPE_PRKEY_RSA: 191

Re: [opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-12-08 Thread Aleksey Samsonov
Hello, 2010/11/30 Douglas E. Engert deeng...@anl.gov: On 11/29/2010 4:36 AM, Aleksey Samsonov wrote: After fix it, I have fail in my tests with GOSTR (PKCS#11 C_Sign). Unfortunately, I don't have logs now. One thing to look at: In pkcs15-sec.c in sc_pkcs15_compute_signature in the old code

Re: [opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-12-08 Thread Douglas E. Engert
On 12/8/2010 6:36 AM, Aleksey Samsonov wrote: Hello, 2010/11/30 Douglas E. Engertdeeng...@anl.gov: On 11/29/2010 4:36 AM, Aleksey Samsonov wrote: After fix it, I have fail in my tests with GOSTR (PKCS#11 C_Sign). Unfortunately, I don't have logs now. One thing to look at: In

Re: [opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-11-29 Thread Aleksey Samsonov
Hello Douglas, 2010/11/23 Douglas E. Engert deeng...@anl.gov: I would especially like the GOSTR maintainers to look at this closely, as many of the flag tests and if statements where modified to support EC and hopefully make it easier to add algorithms in the future. There have compile error

Re: [opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-11-29 Thread Douglas E. Engert
On 11/29/2010 4:36 AM, Aleksey Samsonov wrote: Hello Douglas, 2010/11/23 Douglas E. Engertdeeng...@anl.gov: I would especially like the GOSTR maintainers to look at this closely, as many of the flag tests and if statements where modified to support EC and hopefully make it easier to

Re: [opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-11-29 Thread Douglas E. Engert
On 11/29/2010 4:36 AM, Aleksey Samsonov wrote: Hello Douglas, 2010/11/23 Douglas E. Engertdeeng...@anl.gov: I would especially like the GOSTR maintainers to look at this closely, as many of the flag tests and if statements where modified to support EC and hopefully make it easier to

[opensc-devel] Initial ECDSA modifications to OpenSC for use with PIV cards in OpenSC #295

2010-11-22 Thread Douglas E. Engert
I am ready to commit changes to OpenSC to allow use of EC keys. So far only ECDSA is supported using named curves. I have been testing using NSS-3.12.7 with Thunderbird to sign e-mail, as well as pkcs11-tool -s to sign hashes. The signatures can be verified via OpenSSL, as well as Entrust. The