I just verified that none of the standardized key generation protocols (CMP, CRMF, XKMS) have any support for PIN handling and PIN policy.
This is not surprising since this is already a part of a smart card. However, in the TPM-case you have a "blank" container and thus have to personalize PINs as well. Anders ----- Original Message ----- From: "Anders Rundgren" <[EMAIL PROTECTED]> To: <dev-tech-crypto@lists.mozilla.org> Sent: Thursday, September 06, 2007 23:42 Subject: KeyGen2 - Replacement for [KeyGen/generateCRMFrequest/Xenroll] Hi All, I don't know if any of you following this list are interested in new standards for on-line provisioning of PKI. In case you are, you may contact me regarding the specification of a scheme that is intended to eventually replace the hodgepodge of sub-standard and entirely proprietary schemes that are currently in use. http://webpki.org/keygen2.pdf Regards Anders Rundgren _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto