I would like to do the following on FIPS 140-3 Level 3 certified cryptographic token using PKCS#11:
Generate RSA key pair on token
Import AES key from multiple components
Wrap and export RSA private key with AES key (PKCS#8) into file
I am trying to do it with a few FIPS 140-2 Level 3 cryptographic token with no success. I am getting CKR_DEVICE_ERROR.
So I am asking if it is possible to do that? Does the compliance of FIPS 140-2 Level 3 allow to wrap and export private key from token? Or it is just the matter of implementation of PKCS#11?
Aucun commentaire:
Enregistrer un commentaire