Groups - PKCS #11 Message-Based Encryption and Decryption uploaded

[Wan-Teh Chang<wtc@google.com>]

        Submitter's message
        In this revision, I added the following functions for message-based signature and verification:

* C_MessageSignInit
* C_SignMessage
* C_SignMessageBegin
* C_SignMessageNext
* C_MessageSignFinal

* C_MessageVerifyInit
* C_VerifyMessage
* C_VerifyMessageBegin
* C_VerifyMessageNext
* C_MessageVerifyFinal

The multiple-part functions follow the two-function, Begin/Next convention I designed for encryption and decryption. This convention doesn't work as well for signature and verification because one must pass a NULL pSignature argument to C_SignMessageNext and C_VerifyMessageNext except for the last data part. This is not ideal but seems acceptable. An alternative design is to go back to the three-function, Begin/Update/End convention of PKCS #11 v2.* for all multiple-part functions.
        
-- Wan-Teh Chang

Document Name: PKCS #11 Message-Based Encryption and Decryption

---

Description
The document specifies new PKCS #11 functions for message-based encryption
and decryption, and a new AES-GCM mechanism for message-based encryption
and two IV generator mechanisms as concrete examples.
Download Latest Revision
Public Download Link

---

Submitter: Wan-Teh Chang
Group: OASIS PKCS 11 TC
Folder: Documents
Date submitted: 2014-06-24 17:54:38
Revision: 3