latchset / kryoptic

a pkcs#11 software token written in Rust
GNU General Public License v3.0
10 stars 4 forks source link

Add support for CKA_ALWAYS_AUTHENTICATE behavior #72

Closed simo5 closed 2 months ago

simo5 commented 2 months ago

When a private key has this attribute set to true it commands that any operation (decryption/signature/etc..) done with this key requires an extra authentication to authorize the individual operation.

This is done by setting flags on the session that will control proper authentication is checked if necessary, and support for the special CKU_CONTEXT_SPECIFIC user type into the fn_login() function.

Fixes #70