[Muscle] Token that supports C_WrapKey function ?

Jan Chaloupecky chaljan at gmail.com
Thu Jun 12 05:52:01 PDT 2008


Hello everybody,
I'm working on a project that uses the SafeNet's PCI HSM for private
key operations:
http://www.safenet-inc.com/products/pki/lunaPCI.asp

Since the application communicates with the HSM via pkcs#11, I'd like
to try it with other HSMs such as USB crypto tokens or smart cards.
However I have problems with finding crypto tokens that fulfill my
requirements. My application is handling a 3DES key, stored on the
token, to wrap and unwrap RSA private keys. Hence the two crucial
pkcs#11 functions I need the token to support are:
- C_GenerateKey with CKM_DES3_KEY_GEN mechanism
- C_WrapKey and C_Unwrapkey with CKM_DES3_CBC mechanism

Some USB tokens I've tried do support the DES3 gen key but none of
them support the key wrapping. So far, I've tried or read the
documentation of the following USB token:
http://www.cryptoken.com/en/products/hardware/ctm2048.php
http://www.eutronsec.com/infosecurity/Contents/ProductLine/Details.aspx?IDProd=71&IDFamiglia=2
http://www.eutronsec.com/infosecurity/Contents/ProductLine/Details.aspx?IDProd=15&IDFamiglia=2
http://www.aladdin.com/etoken/devices/pro-usb.aspx
http://www.athena-scs.com/product.asp?pid=33
http://www.idpendant.de/en/products/usb-tokens.html
http://www.safenet-inc.com/products/tokens/ikey.asp

but no success ..

The target platform of my application is Linux Debian (Etch)

Does anybody of you have a better experience with this topic ?

Thanks in advance for your kind help.

Regards,
Jan Chaloupecky


More information about the Muscle mailing list