Re: [pkcs11] Groups - Proposal for Secure Key Import using an RSA key uploaded

[Michael StJohns <msj@nthpermutation.com>]

On 6/16/2013 9:10 AM, Cohen, Doron wrote:

Hi Tim, Bob, Mike

 

Can you accept an approach for 2.40 that simplifies the proposal  in the lines of  :

 

1.       Restricting the new mechanism to import only asymmetric keys (avoiding the confusion associated with  the unusual need to use pkcs#8 for symmetric keys  - one may still use RSA OAEP which is secure)

2.       Removing the OID arc stuff

3.       Adding wording on how to reject/deal with attribute conflicts at unwrap time.

 

Works for me. 

Mike