[kmf-discuss] using signing mechanisms of the token

Jan Pechanec Jan.Pechanec at Sun.COM
Fri Jan 4 05:02:03 PST 2008


On Fri, 4 Jan 2008, Wyllys Ingersoll wrote:

>> 	I don't see any usage of CKM_CMS_SIG in the souce code but I see
>> CKM_RSA_PKCS and CKF_SIGN (libkmf/lib/common/algorithm.c) for example, which
>> leads me to the assumption that it works as expected.
>>
>> 	thanks, Jan.
>
> KMF does use CKM_RSA_PKCS and CKF_SIGN, but whether or not those operations
> stay on the token
> is a function of the token and that token's PKCS#11 implementation, KMF cannot
> enforce that feature.

	ok, that's a good answer for me. Thanks, Jan.

-- 
Jan Pechanec


More information about the kmf-discuss mailing list