[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: RFC 2628 Implementation ( Crypto API )



On 6 Dec 01, at 11:43, Tolga Acar wrote:

We are using RFC2628 API in our products.

> You might want to look at the PKCS#11 interface for a standardized
> Crypto API set.

RFC2628 is not a competitor to PKCS#11. It is much more simple and 
limited in functionality, yet providing more easier way to plug in 
new symmetric cipher algorithms. It was anticipated that this API to  
be used in kernel only.

Regards,
Valery Smyslov.

> RFC 2628 undermines the inspectibility problem by encapsulating all
> operations under one API. You might find this limiting in secure systems
> that must go through certification and/or evaluation.
> 
> Best,
> - Tolga
> 
> >>> "Mahdavi" <mahdavi110@yahoo.com> 12/2/01 3:06:45 >>>
> Hi.
> 
> Does any body knows any Implementation of RFC 2628 ( crypto API )?
> 
> I want to use it for abstracting cryptographic modules of IPSec. 
> 
> Thanks before 
> 
> mahdavi 
> 
> 




References: