[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-announce
Subject:    Re: [strongSwan-dev] =?utf-8?q?=28no_subject=29?=
From:       Michał_Skalski <mskalski13 () gmail ! com>
Date:       2016-09-29 22:42:32
Message-ID: CABLnzwhZSPsiDZUXMY6naws4HYkT2US+PTWzQxkaGx-j04c0sQ () mail ! gmail ! com
[Download RAW message or body]

PS Also added support for signing with SHA-224 ahsh

2016-09-30 0:41 GMT+02:00 Michał Skalski <mskalski13@gmail.com>:
> Hello
>
> Attached patch allowing use of PKCS#11 smartcards/tokens which don't
> support signing-with-hashing mechanisms.
>
> By default only plain CKM_RSA_PKCS (and if supported by token also
> CKM_ECDSA) mechanism is now used, hashing is done using external
> hasher.
>
> Old behaviour can be restored using
> charon.plugins.pkcs11.use_sign_hasher option.
>
> Code may need tweaking. One possibility is to enable this behaviour
> based on supported mechanisms returned by the token, but it seems
> unnecessary, as all PKCS#11 tokens supporting signatures with hashing
> support also non-hashing version of signature.
>
> Patch should be applied to the master branch.
>
> Comments and suggestions are welcome.
>
> Michał Skalski
_______________________________________________
Dev mailing list
Dev@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/dev
[prev in list] [next in list] [prev in thread] [next in thread]