RE: [pkcs11-comment] Regarding CKF_RNG flag in CK_TOKEN_INFO

[Daniel Minder <Daniel.Minder@utimaco.com>]

Hi Brahmaji,

 

see the definition of CKR_RANDOM_NO_RNG: âThis value can be returned by C_SeedRandom and C_GenerateRandom. It indicates that the specified token doesnât have a random number generator. [â]â

Since CKF_RNG shows whether the token has an RNG or not, my interpretation is that C_SeedRandom and C_GenerateRandom will return CKR_RANDOM_NO_RNG if CKF_RNG is not set.

But even if CKF_RNG is set C_SeedRandom might not be supported in which case CKR_RANDOM_SEED_NOT_SUPPORTED is returned.

 

What would be your expectation on the outcome if CKF_RNG is not set and you call C_GenerateRandom or C_SeedRandom?

 

Regards,

Daniel

 

From: pkcs11-comment@lists.oasis-open.org <pkcs11-comment@lists.oasis-open.org> On Behalf Of Brahmaji K
Sent: Donnerstag, 10. Februar 2022 11:55
To: pkcs11-comment@lists.oasis-open.org
Subject: [pkcs11-comment] Regarding CKF_RNG flag in CK_TOKEN_INFO

 

Dear OASIS Team,

 

When the CKF_RNG flag is not set can we still use the C_SeedRandom() API? Any specific restrictions around using this flag on Random APIs like C_GenerateRandom() and C_SeedRandom()?

 

This is a generic question, not specific to the cryptoki version.

 

Thanks and Regards,

Brahmaji K

---

Utimaco IS GmbH
Germanusstr. 4, D.52080 Aachen, Germany, Tel: +49-241-1696-0, www.utimaco.com
Seat: Aachen â Registergericht Aachen HRB 18922
VAT ID No.: DE 815 496 496
Managementboard: Stefan Auerbach (Chairman) CEO, Malte Pollmann CSO, Martin Stamm CFO

This communication is confidential. If you are not the intended recipient, any use, interference with, disclosure or copying of this material is unauthorised and prohibited. Please inform us immediately and destroy the email.