Update with improvements - Githubissues

MicrochipTech / cryptoauth-openssl-engine

DEPRECATED: Use https://github.com/MicrochipTech/cryptoauthlib/wiki/PKCS11-Linux-Setup

Other

76 stars 49 forks source link

Update with improvements #13

Closed bryan-hunt closed 6 years ago

bryan-hunt commented 6 years ago

Generally a substantial refactor of the engine. In specific also addresses the following issues

Resolves #8

Sign larger digest sizes per NIST 186-4 6.4

Resolves #5

Support for certificates and "key" files that map to the device

Resolves #11

Supports OpenSC-PKCS11 like commands that curl uses

Items that remain:

ECDH can only be supported in OpenSSL 1.1 since 1.0.2's ECDH implementation doesn't use EVP_PKEY methods
OpenSSL 1.1 support is not yet ready as OpenSSL 1.1 changed elliptic curve APIs.