RE: [pkcs11] Proposal: CKM_RSA_PKCS_FIPS_186_4

["Burns, Robert" <Robert.Burns@thalesesec.com>]

Oscar,

Similarly, I am wondering if having a mechanism which is identical to CKM_RSA_PKCS, but restricts key sizes is an appropriate restriction?  Also, I am not 100% confident that CKM_RSA_PKCS is compatible with the restrictions put forth in 186-3/4 -- I'll look into this.

Finally, I think the hard problems that 186-3/4 puts forth is in key generation rather than algorithm usage -- so something to think about.

Thanks,

Bob

> -----Original Message-----
> From: pkcs11@lists.oasis-open.org [mailto:pkcs11@lists.oasis-open.org] On
> Behalf Of Oscar K So Jr.
> Sent: Wednesday, July 31, 2013 5:10 PM
> To: pkcs11@lists.oasis-open.org
> Subject: [pkcs11] Proposal: CKM_RSA_PKCS_FIPS_186_4
> 
> Proposal: CKM_RSA_PKCS_FIPS_186_4
> 
> FIPS-183-4 algorithms:
> http://www.ofr.gov/OFRUpload/OFRData/2013-17396_PI.pdf
> 
> This mechanism is equivalent to: CKM_RSA_PKCS
> 
> 
> 
> --
> 
> Best,
> Oscar