Sorry, I mis-read your note. The comments are about having a card
do the hash then use it with an RSA key, rather then do a HMAC
with a secret key.
But see below too.
Damiano ALBANI wrote:
--- "Douglas E. Engert" <[EMAIL PROTECTED]> wrote :
Are you trying force the card to do the HMAC, becaus
--- "Douglas E. Engert" <[EMAIL PROTECTED]> wrote :
>
> Are you trying force the card to do the HMAC, because you don't trust
> the software to do it? Like trying to enforce some policy that hashs
> must be done on the card? Or are you willing to let the PKCS#11
> software
> to the hash?
I'd li