Re: [Ejbca-develop] Generating ECDSA brainpool keys in Luna SA HSM

[Tomas G. <to...@pr...>]

I haven't tried using iaik with the clientToolBox actually. Perhaps it's not possible, or parhaps it is...
I was planning to either write a iaik key generation program or something else for brainpool, but haven't done it yet.
Perhaps it's possible to configure keytool to use iaik?

Sweden is becoming ok whetherwise now. Hope to see you in porto in june!

Cheers,
Tomas

Luis Felix <lui...@mu...> wrote:

>Hi Tomas,
>
>how are you ? I hope everything is well and sunny in Sweden !! :-)
>
>I assumed that the error was some kind of problem with the Sun provider 
>or the Luna library, but as the clientToolBox app has the Bouncy Castle 
>jars in it's libs directory, I thought it would replace the Sun provider 
>with the BC provider... I'll install the iaik provider to try and solve 
>the problem...
>Regarding the Luna tools, I just need to create a properties file 
>(adapted to iaik provider) making using of 
>"/usr/lunasa/lib/libCryptoki2.so" like the one I put on the previous 
>mail (lunapkcs11.cfg), and then pass it as a parameter to the 
>clientToolBox app, right ? Do I need anything else ?
>
>Thank you very much for your help !! :-)
>
>Cheers,
>Luis Felix
>
>
>Tomas Gustavsson wrote:
>> Hi Luis,
>>
>> The reason you can't generate brainpool curves on the HSM is that the 
>> Sun pkcs11 provider does not support it. It is not smart enough to 
>> simply pass it to the HSM either.
>> To generate brainpool curves you would have to use:
>> - tools from the HSM
>> - another pkcs11 provider such as iaik
>>
>> Cheers,
>> Tomas
>> Ps. Nice hearing from you again :-)
>>
>>
>> Luis Felix <lui...@mu...> wrote:
>>
>> >------------------------------------------------------------------------------
>> >The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
>> >production scanning environment may not be a perfect world - but 
>> thanks to
>> >Kodak, there's a perfect scanner to get the job done! With the NEW 
>> KODAK i700
>> >Series Scanner you'll get full speed at 300 dpi even with all image
>> >processing features enabled. 
>> http://p.sf.net/sfu/kodak-com_______________________________________________
>> >Ejbca-develop mailing list
>> >Ejb...@li...
>> >https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>> ------------------------------------------------------------------------
>>
>> Hi Luis,
>>
>> The reason you can't generate brainpool curves on the HSM is that the Sun pkcs11 provider does not support it. It is not smart enough to simply pass it to the HSM either.
>> To generate brainpool curves you would have to use:
>> - tools from the HSM
>> - another pkcs11 provider such as iaik
>>
>> Cheers,
>> Tomas
>> Ps. Nice hearing from you again :-)
>>
>>
>> Luis Felix <lui...@mu...> wrote:
>>
>>   
>>> ------------------------------------------------------------------------------
>>> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
>>> production scanning environment may not be a perfect world - but thanks to
>>> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
>>> Series Scanner you'll get full speed at 300 dpi even with all image 
>>> processing features enabled. http://p.sf.net/sfu/kodak-com_______________________________________________
>>> Ejbca-develop mailing list
>>> Ejb...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>     
>
>
>-- 
>_______________________________________________
>
>Luis Felix
>
>lui...@mu...
>MULTICERT S.A <http://www.multicert.com/>
>
>Avenida Sidónio Pais, 379
>Edificio B, Piso -1, Sala C5
>4100-468 Porto
>Tel: +351 223391810 Fax: +351 223391811
>_______________________________________________
>
> 
>
>