[Open Crypto Project] #39: Add state save/restore capability to hash cores

Open Crypto Project trac at cryptech.is
Fri Jul 10 05:11:27 UTC 2015


#39: Add state save/restore capability to hash cores
-------------------------+--------------------
 Reporter:  sra          |       Owner:  randy
     Type:  enhancement  |      Status:  new
 Priority:  major        |   Milestone:
Component:  rtl          |     Version:
 Keywords:               |  Blocked By:
 Blocking:               |
-------------------------+--------------------
 Right now we have no way of implementing incremental hashing in PKCS11, so
 we can't support `C_DigestUpdate()`/`C_DigestFinal()`, only `C_Digest()`.
 This wasn't on the critical list for our first deliverable because
 OpenDNSSEC uses `C_Digest()`, but other packages want the incremental
 capabilities.

 The missing piece here is the ability to save and restore internal state
 from the hash cores.  None of our hash cores support this yet.

 This issue also affects the incremental PKCS11 signature and verification
 functions (`C_SignUpdate()`/`C_SignFinal()`,
 `C_VerifyUpdate()`/`C_VerifyFinal()`).

--
Ticket URL: <https://trac.cryptech.is/ticket/39>
Open Crypto Project <https://wiki.cryptech.is/>



More information about the Ticket-BCC mailing list