I just verified that none of the standardized key generation protocols (CMP, 
CRMF,
XKMS) have any support for PIN handling and PIN policy.

This is not surprising since this is already a part of a smart card.  However,
in the TPM-case you have a "blank" container and thus have to personalize
PINs as well.

Anders
----- Original Message ----- 
From: "Anders Rundgren" <[EMAIL PROTECTED]>
To: <dev-tech-crypto@lists.mozilla.org>
Sent: Thursday, September 06, 2007 23:42
Subject: KeyGen2 - Replacement for [KeyGen/generateCRMFrequest/Xenroll]


Hi All,

I don't know if any of you following this list are interested in new
standards for on-line provisioning of PKI.  In case you are, you may
contact me regarding the specification of a scheme that is intended
to eventually replace the hodgepodge of sub-standard and entirely
proprietary schemes that are currently in use.

http://webpki.org/keygen2.pdf

Regards
Anders Rundgren
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to