PKCS #11 encryption v2 API (formerly called AEAD API)

Hi,

In the last conference call, I presented a preliminary proposal of
PKCS #11 AEAD API. I met with Bob Relyea last week to go over the
feedback from Michael (by email) and from others.

Here is a second attempt at the API. We removed "AEAD" from the
function names because they also apply to non-AEAD algorithms such as
CTR mode. For lack of a better term, I refer to the new functions
"encryption v2".

Attached are a presentation (the PDF file) and the C types and
functions (the .txt file) of the proposed PKCS #11 encryption v2 API.

In short, we still kick off an encryption or decryption process using
the existing C_EncryptInit or C_DecryptInit function. But each
mechanism specifies whether it is old style or new style (v2). For a
new-style (v2) mechanism, new V2 functions must be used to perform the
encryption or decryption, and to finish (finalize) the encryption or
decryption process.

Wan-Teh Chang