Support for CKM_ECDSA with hashing

opendnssec / SoftHSMv2

SoftHSM version 2

http://www.softhsm.org/

Other

783 stars 343 forks source link

Support for CKM_ECDSA with hashing #620

Open johughes99 opened 3 years ago

johughes99 commented 3 years ago

I have been undertaking a wide range of performance tests - including for signing/verification.

Whilst I understand that support for SHA3 is an enhancement request I was slightly surprised that mechanisms such as CKM_ECDSA_SHA256 and CKM_ECDSA_SHA512 are not supported

Any reasons why only CKM_ECDSA is supported as regards a EC signing mechanism?

Is it because there is no demand - and/or that typical applications compute the hash prior to calling C_SignInit with the CKM_ECDSA mechanism?

jca-klk commented 2 months ago

I was also surprised by the lack of support of CKM_ECDSA_SHA256. I gave #683 a spin, and it works for my small tests scenario.

Any chance this gets merged ?