Re: [pkcs11] OAEP/PSS and SHA-2

[Jakub Jelen <jjelen@redhat.com>]

On Mon, 2020-07-06 at 18:00 +0000, Jonathan Schulze-Hewett wrote:
> I can't find a way to query a token to see if it supports OAEP or PSS
> with
> SHA-2. Am I missing something or is this an item that we should look
> at
> addressing?

I see the following mechanism in version 2.4 [1] (and other SHA2
around):

CKM_SHA256_RSA_PKCS_PSS

There are no corresponding mechanisms for OAEP. But as OAEP is
encryption, the pre-hashing does not make sense.

On the other hand, if you talk about mechanism parameters, I do not
think there is any discovery mechanism at this moment.

[1] 
http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cs01/pkcs11-curr-v2.40-cs01.html#_Toc399398853


Regards,
-- 
Jakub Jelen
Senior Software Engineer
Security Technologies
Red Hat, Inc.