[gnutls-devel] [PATCH] improve compatibility in pkcs11 key generation

Nikos Mavrogiannopoulos nmav at gnutls.org
Tue Aug 5 13:41:17 CEST 2014


On Mon, Aug 4, 2014 at 3:39 PM, Wolfgang Meyer zu Bergsten
<w.bergsten at sirrix.com> wrote:
> Hello,
> find attached a patch for improving the compatibilty of key generation
> with the "CardOS API 5.1" PKCS#11 library.

Hello,
 Wouldn't that be better if both unwrap and fixed exponent be set
using special flags? That is create the flags, e.g.,
GNUTLS_PKCS11_GEN_RSA_EXP_65537, GNUTLS_PKCS11_GEN_KEY_UNWRAP,
GNUTLS_PKCS11_GEN_KEY_WRAP, which will enable that specific
functionality for the key.

regards,
Nikos



More information about the Gnutls-devel mailing list