mardi 24 mars 2015

Is it possible to wrap and export RSA private key in FIPS 140-2 Level 3 compliant hardware?



I would like to do the following on FIPS 140-3 Level 3 certified cryptographic token using PKCS#11:




  1. Generate RSA key pair on token




  2. Import AES key from multiple components




  3. Wrap and export RSA private key with AES key (PKCS#8) into file




I am trying to do it with a few FIPS 140-2 Level 3 cryptographic token with no success. I am getting CKR_DEVICE_ERROR.


So I am asking if it is possible to do that? Does the compliance of FIPS 140-2 Level 3 allow to wrap and export private key from token? Or it is just the matter of implementation of PKCS#11?





Aucun commentaire:

Enregistrer un commentaire