[Cryptech Tech] Generating keys on alpha using pkcs11-tool

Linus Nordberg linus at nordberg.se
Sat Nov 19 16:14:36 UTC 2016


Leif Johansson <leifj at sunet.se> wrote
Sat, 19 Nov 2016 16:55:19 +0100:

> Skickat från min iPhone
>
>> 19 nov. 2016 kl. 16:52 skrev Linus Nordberg <linus at nordberg.se>:
>> 
>> I don't know but I'll see if I can make that spy tool tell me as soon as
>> I'm back with the device.
>> 
>> Hmm. I bet `--label' and `--id' would be worthwile investigating too.
>> 
>> 
>> Leif Johansson <leifj at sunet.se> wrote
>> Sat, 19 Nov 2016 23:56:28 +0900:
>> 
>>> What does your template look like?
>>> 
>
> I mean what do you feed the library?

I'm using pkcs11-tool. Judging from source code, I'd guess it's setting
CKA_MODULUS_BITS | CKA_PUBLIC_EXPONENT | CKA_VERIFY | CKA_ENCRYPT |
CKA_WRAP and CKA_SIGN | CKA_DECRYPT | CKA_UNWRAP for public and private
templates, respectively.

If that's what you mean.




More information about the Tech mailing list