Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-2014

Support signing with SHA256WithRSAandMGF1 on PKCS11 HSMs

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 3.11.2, EJBCA 4.0.0
    • Component/s: None
    • Labels:
      None

      Description

      The Java PKCS#11 wrapper is missing support for the signature algorithm RSASSA-PSS (a.k.a. SHAxxxWithRSAandMGF1). It needs to list the algorithms and the mechanisms as well as sending the correct mechanism parameters.

      This issue is about adding support for HSM:s that does the padding and hashing by them self (they support the mechanisms CKM_SHAxxx_RSA_PKCS_PSS).

        Attachments

          Issue Links

          is related to

          New Feature - A new feature of the product, which has yet to be developed. ECA-940 possibility to use an EC key stored on a HSM

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. ECA-2013 Support SHA224WithECDSA on PKCS11 HSMs

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. ECA-2015 Support SHA256WithRSAandMGF1 (RSA-PSS) on PKCS11 HSMs that does not hash/pad on their own

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. ECA-2012 Support named curves for Brainpool ECC in PKCS11 HSMs

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

            Activity

              People

              Assignee:
              markus Markus Kilås
              Reporter:
              markus Markus Kilås
              Verified by:
              Tomas Gustavsson
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: