pkcs#12 - Prevent private key exposure using custom openssl engine -
is possible have engine generate keypair, have application 'use' private key (e.g. sign) without exposing key ? e.g. openssl return kind of reference not key itself. there should way store keypair (and associated certificate chains) , retrieve them later. thinking of storing in pkcs12 struct.
could give me pointers how in c ?
this possible using hardware security module (http://en.wikipedia.org/wiki/hardware_security_module) supported openssl.
i have used ncipher hsm openssl in past, not supported vendor.
Comments
Post a Comment