Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Must be a library that can be linked with other software.
  • Wiki MarkupMust implement the \[wiki:PKCS11 PKCS#11 \] interface v2.20, specified by RSA Labratories.
  • Must be licensed under a BSD license.
  • Must use a cryptographic library that is licensed under BSD.
  • The user must be able to specify the number of tokens to use and its corresponding slots.
  • Should keep a log of important events.

...

  • Must handle RSA, SHA1, and SHA256.
  • Should handle RIPEMD160, SHA384, and SHA512.

Key management

...

  • Must be able to protect the keys by using a PIN via the \[wiki:PKCS11 PKCS#11 \] interface.
  • Must be possible to do backup of the keys.
  • Must be able to manage 1000 1024-bit RSA key pairs.

...

  • Must be able to initialize a token with SO PIN, user PIN, and label.
  • Must be able to show which tokens that are available.
  • Must be able to import/export RSA keys in PKCS!#8 PKCS#8 format.
  • Must handle both encrypted and unencrypted PKCS!#8 PKCS#8 files.

Support program: softhsm-keyconv

  • Must be able to convert from BIND .private format to PKCS!#8PKCS#8.
  • Must be able to convert from PKCS!#8 PKCS#8 format to BIND .private and .key format.
  • Must handle both encrypted and unencrypted PKCS!#8 PKCS#8 files.
  • Must support the algorithms: RSAMD5, DSA, RSASHA1, DSA-NSEC3-SHA1, RSASHA1-NSEC3-SHA1, RSASHA256, RSASHA512