Re: [pkcs11] CKA_PUBLIC_KEY_INFO

[Stef Walter <stefw@redhat.com>]

On 10.04.2013 01:35, Michael StJohns wrote:
> Attached is an edit of the appropriate sections of PKCS11 v2.30 to add
> support for CKA_PUBLIC_KEY_INFO.
> 
> Additions are highlighted.  Assuming this is acceptable, I'll provide
> the appropriate edits for the public key sections to describe the
> encoding of the public key info field in SubjectPublicKeyInfo

Can we have this attribute on X.509 certificates as well? That would be
a good way of detecting whether a certificate and key match
cryptographically.

In addition I'd like to use it in a trusted certificate PKCS#11 model.

Cheers,

Stef