RE: Comments to PKCS#11 V2.40 1st Public Draft

["Griffin, Robert" <robert.griffin@rsa.com>]

Hi,

Thanks very much for you comments!

We'll be reviewing comments in detail after the holidays.

Regards,

Bob  (KMIP TC co-chair)

-----Original Message-----
From: pkcs11-comment@lists.oasis-open.org [mailto:pkcs11-comment@lists.oasis-open.org] On Behalf Of Dieter Bong
Sent: Montag, 23. Dezember 2013 06:07
To: pkcs11-comment@lists.oasis-open.org
Subject: [pkcs11-comment] Comments to PKCS#11 V2.40 1st Public Draft

Hi,

Thank you for releasing PKCS#11 v2.40 for public review. Pls see my comments below.

[PKCS11-BASE]
* Chapter 5.1: Wrong reference "Section 4.1" in 1st paragraph.

[PKCS11-CMECH]
* Chapter 2.1.1: mechanism list should be extended by CKM_RSA_AES_KEY_WRAP
* Chapter 2.1.3: Page 20: For unambiguity, the 2nd paragraph should be extended by the same sentence as has been added in [PKCS11-BASE], page 53: "Effective with version 2.40, tokens MUST also store CKA_PUBLIC_EXPONENT. This permits the retrieval of sufficient data to reconstitute the associated public key."
* Chapter 2.32: The mechanism table lists mechanisms CKM_TLS10_MAC_SERVER and CKM_TLS10_MAC_CLIENT. These mechanisms are not defined / explained any further. Please clarify.
* Chapter 2.32: Mechanism names CKM_TLS_KDF and CKM_TLS12_KDF are used in an inconsistent manner; same for CKM_TLS_MAC and CKM_TLS12_MAC. Please unify naming of these mechanism.

[PKCS11-PROF]
* Chapter 3.1: Typo "ProviPKCS11"

[PKCS11-UG]
* Page 17: unresolved reference


Best regards,
Dieter Bong

Product Manager
Utimaco Safeware AG
Germanusstrasse 4
52080 Aachen
Phone:  +49-241-1696-233
Fax:  +49-241-1696-199
Mobile:  +49-173-9080 381
E-mail:  dieter.bong@utimaco.com
http://hsm.utimaco.com


________________________________

Utimaco Safeware AG

Seat: Aachen – Registergericht Aachen HRB 17938
WEEE-Reg.No.: DE39805015
Managementboard: Malte Pollmann (Chairman) CEO, Dr. Frank J. Nellissen CFO Supervisory Board: Katrin Wehr-Seiter (Chairman)