pkcs11 — archive

[Wan-Teh Chang]

Submitter's message In this revision, I added the following functions for message-based signature and verification: * C_MessageSignInit * C_SignMessage * C_SignMessageBegin * C_SignMessageNext * C_MessageSignFinal * C_MessageVerifyInit * C_VerifyMessage * C_VerifyMessageBegin * C_VerifyMessageNext * C_MessageVerifyFinal The multiple-part functions follow the two-function, Begin/Next convention I designed for encryption and decryption. This convention doesn't work as well for signature and verification because one must pass a NULL pSignature argument to C_SignMessageNext and C_VerifyMessageNext except for the last data part. This is not ideal but seems acceptable. An alternative design is to go back to the three-function, Begin/Update/End convention of PKCS #11 v2.* for all multiple-part functions. -- Wan-Teh Chang Document Name : PKCS #11 Message-Based Encryption and Decryption Description The document specifies new PKCS #11 functions for message-based encryption and decryption, and a new AES-GCM mechanism for message-based encryption and two IV generator mechanisms as concrete examples. Download Latest Revision Public Download Link Submitter : Wan-Teh Chang Group : OASIS PKCS 11 TC Folder : Documents Date submitted : 2014-06-24 17:54:38 Revision : 3