Gila Sheftel wrote:
>
> Hi,
>
> Our purpose is to write an add-on to openSSL in order to interface it
> safely and comprehensively with a smartcard.
>
> My teammate and I have come a long way in understanding the high-level
> cryptography structure -- where the methods are found, how to use them,
> etc, but where we get stuck is the following:
>
> for example, in openssl-0.9.6a/crypto/rsa/rsa.h the following methods
> are mentioned:
>
> int (*rsa_pub_enc)(int flen,unsigned char *from,unsigned char *to,
> RSA *rsa,int padding);
> int (*rsa_pub_dec)(int flen,unsigned char *from,unsigned char *to,
> RSA *rsa,int padding);
>
> And they are again mentioned in rsa_lib.c where
>
> int RSA_public_encrypt(int flen, unsigned char *from, unsigned char *to,
> RSA *rsa, int padding)
>
> returns it, but that's all. Are we missing something? Where are all the
> low-level methods defined? Are they system-native or protected or have I
> overlooked something entirely?
>
Hello,
My name is Stephen Henson, I'm one of the OpenSSL core developers who
works for Celo and thus Gemplus.
What kind of facilities does the smartcard provide? Does it do high
level PKCS#1 operations or just the raw 'private key operation'.
You can intercept both operations but how and where you do this depends
on exactly what you want to do.
Which particular Gemplus libraries are you using? I'm myself getting up
to speed on the Gemplus smart card side of things so maybe we could help
each other here.
One possible project I'm considering for OpenSSL would be to provide
support for smartcards (and thus Gemplus smartcards) in the core source
code. The current ENGINE architecture for OpenSSL should help with this
but I think it needs some additional support to make it as smart card
friendly as possible.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
