search

CardContact / sc-hsm-embedded

PKCS#11 and CSP-Minidriver library for the SmartCard-HSM and STARCOS based signature cards
BSD 3-Clause "New" or "Revised" License
98 stars 31 forks source link

Client authentication in Firefox fails for RSA keys with TLS1.3 #26

Closed CardContact closed 4 years ago

CardContact commented 4 years ago

TLS 1.3 requires the use of RSA PSS for client authentication. Firefox uses CKM_RSA_PKCS_PSS, while the module provides for CKM_SHA1_RSA_PKCS_PSS and CKM_SHA256_RSA_PKCS_PSS as well as two proprietary modes CKM_SC_HSM_PSS_SHA1 and CKM_SC_HSM_PSS_SHA256.

The missing CKM_RSA_PKCS_PSS maps to CKM_SC_HSM_PSS_SHA1 and CKM_SC_HSM_PSS_SHA256 depending on the hash length passed in as parameter to the function.