[kmf-discuss] Extension to the API

[Darren J Moffat]

Massimiliano Pala wrote:
>>  C_DigestInit, C_DigestUpdate, C_DigestFinal.
> 
> Same as above. Anyhow thanks for the pointers, I will look into those and
> pick the best ones. If the functions were provided via KMF and an hardware
> token is used, then this would use the hardware implementation instead the
> software one... maybe faster (the same argument can be made for the random
> generator---hardware implementations are better than software, usually).

For getting access to hardware you MUST use the PKCS#11 API, see my 
other email for how easy this is when you already use KMF.  By using the 
  PKCS#11 handle you extract from the KMF handle you will be using the 
hardware token you originally passed to KMF (or the default one via the 
libpkcs11 Metaslot in some cases).

-- 
Darren J Moffat