Re: [pkcs11] Groups - Proposal for Secure Key Import using an RSA key uploaded

On 6/16/2013 9:10 AM, Cohen, Doron
      wrote:

    

    
      
      
      
      

        
Hi Tim, Bob,
            Mike

        
        
 

        
Can you accept
            an approach for 2.40 that simplifies the proposal  in the
            lines of  :

        
 

        
1.       Restricting
            the new mechanism to import only asymmetric keys (avoiding
            the confusion associated with  the unusual need to use
            pkcs#8 for symmetric keys  - one may still use RSA OAEP
            which is secure) 

        
2.       Removing
            the OID arc stuff 

        
3.       Adding
            wording on how to reject/deal with attribute conflicts at
            unwrap time.

        
 

        

      

    
    

    Works for me.  

    

    Mike