PKCS#11 v2.2：密码令牌接口规范概述与设计

PKCS

公钥密码算法标准

5星 · 超过95%的资源需积分: 9 102 浏览量更新于2023-03-16 收藏 2.71MB DOC 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

PKCS#11 v2.2 是一个专门针对密码安全设备的程序设计接口（Cryptographic Token Interface, 简称 Cryptoki）的标准规范，由 RSA Laboratories 于2004年6月28日发布。该标准旨在为处理和管理密码信息的设备提供一个统一、技术独立且资源共享的编程接口，以实现多种设备的逻辑抽象，使不同的应用程序能够方便地访问这些设备，如智能卡、硬件安全模块（HSM）等。该标准的核心设计目标包括： 1. **技术独立性**：通过标准化接口，确保不同厂商生产的密码设备都能兼容并遵循相同的交互方式，从而降低应用开发者的适配成本。 2. **资源共享**：允许多个应用程序同时或异步地访问同一物理设备，实现了跨应用程序的密码服务共享。 3. **逻辑视图统一**：定义了密码令牌的概念，将设备的功能和状态以一种通用的抽象形式呈现给开发者，简化了集成和管理。 - **用户和应用程序角色**：明确区分用户（持卡人或系统用户）和应用程序，前者是密码的拥有者，后者负责与令牌进行交互。应用程序可以分为读取只写（Read/Write）、只读（Read-only）两种模式，每种模式下对对象的操作权限有所不同。 - **会话管理**：会话是与设备交互的基本单元，支持不同类型的会话状态，包括只读和读写模式，每个会话有唯一的会话和对象句柄。会话事件机制用于通知应用程序关于会话状态的变化。 - **二次认证（Deprecated）**：尽管不再推荐使用，但早期版本可能支持的备用身份验证机制。 - **安全考虑**：标准详细阐述了安全方面的设计和实施要点，包括平台和编译器依赖的指令集，如结构打包、指针处理以及示例代码片段，针对Windows（Win32和Win16）和通用环境的指导。 PKCS#11 v2.2为现代密码基础设施提供了一套强大的编程框架，使得密码管理变得高效、安全且易于集成。开发人员在遵循此标准时，可以创建稳健的应用程序来操作各种类型的加密令牌，确保数据的安全传输和存储。

资源详情

资源推荐

XI
12.37.3  Twofish key generation........................................................................................................377
12.37.4  Twofish -CBC.......................................................................................................................377
13  CRYPTOKI TIPS AND REMINDERS.............................................................................................377
13.1  OPERATIONS, SESSIONS, AND THREADS......................................................................................377
13.2  MULTIPLE APPLICATION ACCESS BEHAVIOR.............................................................................378
13.3  OBJECTS, ATTRIBUTES, AND TEMPLATES.................................................................................... 379
13.4  SIGNING WITH RECOVERY......................................................................................................... 379
14  MANIFEST CONSTANTS.................................................................................................................381
15  TOKEN PROFILES............................................................................................................................389
15.1  GOVERNMENT AUTHENTICATION-ONLY.....................................................................................390
15.2  CELLULAR DIGITAL PACKET DATA...........................................................................................390
15.3  OTHER PROFILES...................................................................................................................... 390
16  COMPARISON OF CRYPTOKI AND OTHER APIS...................................................................391
16.1  FORTEZZA CIPG, REV. 1.52.................................................................................................391
16.2  GCS-API................................................................................................................................. 393
17  INTELLECTUAL PROPERTY CONSIDERATIONS...................................................................395
18  METHOD FOR EXPOSING MULTIPLE-PINS ON A TOKEN THROUGH CRYPTOKI 
(DEPRECATED)........................................................................................................................................396
19  REVISION HISTORY.........................................................................................................................397
List of Figures
Figure 1, General Cryptoki Model.....................................................................................14
Figure 2, Object Hierarchy................................................................................................16
Figure 3, Read-Only Session States...................................................................................20
Figure 4, Read/Write Session States..................................................................................21
Figure 5, Object Attribute Hierarchy.................................................................................65
List of Tables
Table 1, Symbols...............................................................................................................10
Table 2, Prefixes................................................................................................................10
Table 3, Character Set........................................................................................................12
Table 4, Read-Only Session States....................................................................................21
Table 5, Read/Write Session States...................................................................................22
Table 6, Access to Different Types Objects by Different Types of Sessions...................22
June 2004 Copyright © 2004 RSA Security Inc.

XII PKCS #11 V2.20: CRYPTOGRAPHIC TOKEN INTERFACE STANDARD

Table 7, Session Events.....................................................................................................23

Table 8, Summary of Cryptoki Functions.........................................................................27

Table 9, Major and minor version values for published Cryptoki specifications..............39

Table 10, Slot Information Flags.......................................................................................41

Table 11, Token Information Flags...................................................................................44

Table 12, Session Information Flags.................................................................................50

Table 13, Mechanism Information Flags...........................................................................57

Table 14, C_Initialize Parameter Flags.............................................................................64

Table 15, Common footnotes for object attribute tables...................................................69

Table 16, Common Object Attributes................................................................................70

Table 17, Hardware Feature Common Attributes..............................................................70

Table 18, Clock Object Attributes.....................................................................................71

Table 19, Monotonic Counter Attributes...........................................................................72

Table 20, User Interface Object Attributes........................................................................73

Table 21, Common Storage Object Attributes..................................................................74

Table 22, Data Object Attributes.......................................................................................75

Table 23, Common Certificate Object Attributes..............................................................76

Table 24, X.509 Certificate Object Attributes...................................................................78

Table 25: WTLS Certificate Object Attributes..................................................................80

Table 26, X.509 Attribute Certificate Object Attributes...................................................81

Table 27, Common Key Attributes....................................................................................82

Table 28, Common Public Key Attributes........................................................................84

Table 29, Mapping of X.509 key usage flags to cryptoki attributes for public keys........85

Table 30, Common Private Key Attributes.......................................................................85

Table 31, Common Secret Key Attributes.........................................................................88

XIII

Table 32, Common Domain Parameter Attributes............................................................91

Table 33, Common Mechanism Attributes........................................................................91

Table 34, Mechanisms vs. Functions...............................................................................193

Table 35, RSA Public Key Object Attributes..................................................................198

Table 36, RSA Private Key Object Attributes.................................................................199

Table 37, PKCS #1 v1.5 RSA: Key And Data Length....................................................203

Table 38, PKCS #1 Mask Generation Functions.............................................................204

Table 39, PKCS #1 RSA OAEP: Encoding parameter sources......................................204

Table 40, PKCS #1 RSA OAEP: Key And Data Length................................................206

Table 41, PKCS #1 RSA PSS: Key And Data Length....................................................207

Table 42, ISO/IEC 9796 RSA: Key And Data Length....................................................208

Table 43, X.509 (Raw) RSA: Key And Data Length......................................................210

Table 44, ANSI X9.31 RSA: Key And Data Length......................................................211

Table 45, PKCS #1 v1.5 RSA Signatures with Various Hash Functions: Key And Data

Length..............................................................................................................................212

Table 46, PKCS #1 RSA PSS Signatures with Various Hash Functions: Key And Data

Length..............................................................................................................................213

Table 47, ANSI X9.31 RSA Signatures with SHA-1: Key And Data Length................213

Table 48, DSA Public Key Object Attributes..................................................................214

Table 49, DSA Private Key Object Attributes................................................................215

Table 50, DSA Domain Parameter Object Attributes.....................................................216

Table 51, DSA: Key And Data Length............................................................................218

Table 52, DSA with SHA-1: Key And Data Length.......................................................219

Table 53, FORTEZZA Timestamp: Key And Data Length............................................219

Table 54, Mechanism Information Flags.........................................................................220

Table 55, Elliptic Curve Public Key Object Attributes...................................................222

剩余63页未读，继续阅读

lyzoking

粉丝: 0
资源: 1

会员权益专享

PKCS#11 v2.2：密码令牌接口规范概述与设计

pkcs#1_V2.1.zip

PKCS11 标准 开发接口文档

PKCS #1 v2.2 RSA Cryptography Standard.pdf

PKCS#11和PKCS#5的区别

PKCS#11/SunPKCS11/IBMEnterpPKCS11

pkcs#1v1.5_pkcs 1 v1 5有什么特别之处，而这种攻击不会消失

PKCS#1 v1.5填充方式的具体代码在哪里

openssl 把 pkcs#1 格式的 ec私钥转换为 pkcs#8 格式

PKCS#11对密码模块接口要求

Android系统中，默认使用PKCS#1 v1.5填充方式进行签名的代码在哪里

java pkcs#8

PKCS#1 数据格式

我只有 PKCS#1编码格式的 base64 怎么办

PKCS#7是什么？怎么用

openssl pkcs11

上述代码的PKCS#7 填充具体是怎么做的

如何将 ECDSA 密钥对中的私钥转换为 PKCS#1 格式

请详细讲一下sunpkcs11.jar这个包

android端对 pkcs#7文件进行验签

会员权益专享

最新资源

PKCS11 标准开发接口文档