Wednesday, 15 July 2015

cryptography - PKCS11 command flow -


I'm trying to access a PKCS11 cryptographic token (smart card) I was previously using a smart card that had its own proprietary API for card access, so I am trying to understand how I can put it in PKSS 11 token.

In my previous smart card, to connect me to the device, then issue various PINs such as API calls, such as verify the PIN, get the card information, select the file, read the file, write the file , Cryptographic functions (RNG, symmetric / symmetric encryption, etc.) and finally, I disconnect from the device.

Is there a similar flow to PKCS 11 tokens? I looked at various tasks like C_Initialize, C_OpenSession, etc., but I'm not sure what they do or what parameters to use, some simple examples show in C. how an application reaches the token. Checking the pin, will be very useful.

Thank you!

I wrote the PACACS # 11 wrapper for NIT, which comes with the unit test in which All works provided by PKASS # 11 API have been included. You can take a look at it which can easily be mapped to ANSI C.

You should at least consider reading "Chapter 2 - Scope", "Chapter 6 - General Overview" and "Chapter 10 - Objects".


No comments:

Post a Comment