PKCS#11 vs. Minidriver vs. GP Commands...

6/17/2013 11:45:50 PM
Gravatar
Total Posts 1

PKCS#11 vs. Minidriver vs. GP Commands...

Hello,

I am confused about what types of operations I can perform on a smartcard with this library, vs. mini-driver methods, vs. global platform commands... For example, if I need to create a symmetric (or asymmetric) key that I create on Luna SA and securely inject it down to my smart card, would NCryptoki help abstract some of this? (replacing a card management key). 

How about if I want to do a challenge-response authentication between a symmetric key on the card, and a symmetric key in Luna, without exporting/handling either of the keys directly?

 

Many thanks!

 

 

 

 

6/18/2013 12:50:42 AM
Gravatar
Total Posts 300
Ugo Chirico http://www.ugochirico.com

Re: PKCS#11 vs. Minidriver vs. GP Commands...

NCryptoki is a wrapper to PKCS#11 modules for tokens and HSMs.

To answer to yout questions you should read PKCS#11 specifications that you can find in our wiki:

http://wiki.ncryptoki.com/ 

PKCS#11 specifications define a platform independent interface (an API) for cryptographic tokens 

minidriver defines another interface for cryptographic tokens specific for Microsoft Windows

GlobalPlatform specifications define a card that allows to make several things and also cryptographic functions.