pkcs#12 - Prevent private key exposure using custom openssl engine -


is possible have engine generate keypair, have application 'use' private key (e.g. sign) without exposing key ? e.g. openssl return kind of reference not key itself. there should way store keypair (and associated certificate chains) , retrieve them later. thinking of storing in pkcs12 struct.

could give me pointers how in c ?

this possible using hardware security module (http://en.wikipedia.org/wiki/hardware_security_module) supported openssl.

i have used ncipher hsm openssl in past, not supported vendor.


Comments

Popular posts from this blog

monitor web browser programmatically in Android? -

Shrink a YouTube video to responsive width -

wpf - PdfWriter.GetInstance throws System.NullReferenceException -