Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added a description of expected interaction betweeN CSR client softwa… #73

Merged
merged 2 commits into from
Jan 15, 2024

Conversation

ounsworth
Copy link
Contributor

…re and attester. Closes #67

between the CSR generator and the attesting environment, first to obtain
the necessary evidence statements about the subject key, and then to use
the subject key to sign the CSR. For example, consider a CSR generated by
OpenSSL about a subject key stored on a PKCS#11 device. The interaction would
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
OpenSSL about a subject key stored on a PKCS#11 device. The interaction would
a popular crypto library about a subject key stored on a PKCS#11 device. The interaction would

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What reference would you use for PKCS#11?
This one?

[PKCS11] RSA Laboratories, "PKCS #11 v2.20: Cryptographic Token
Interface Standard", Public Key Cryptography Standards
PKCS#11-v2.20, June 2004.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ugg, yeah, I guess I need to cite PKCS#11. How's this?

PKCS11:
author:
org: OASIS
title: "PKCS #11 Cryptographic Token Interface Base Specification Version 2.40"
date: 14 April 2015
target: http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/os/pkcs11-base-v2.40-os.html

@ounsworth ounsworth merged commit b0602f1 into main Jan 15, 2024
2 checks passed
@ounsworth ounsworth deleted the mikeo_hsm_interaction branch January 15, 2024 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Definition of the Interface between the CSR client software and the attester
2 participants