linux - PKCS#11 driver for Trusted Platform Module (TPM) chip version 1.2 -
i'm building application can interact tpm chip via pkcs#11, generate private key (stored in tpm), import certificate according private key, sign data,... want use tpm chip hsm. so, can me! what's name of pkcs#11 driver can me interact tpm? or what's must make pkcs#11 driver? have build opencryptoki , trousers on centos 6.5 after build successful don't know what's file in opencrptoki or trousers pkcs11 driver! thanks!
opencryptoki should support tpm via trousers (see e.g. here, here, here).
there simple-tpm-pk11 project takes straighter approach , might interesting -- see this interesting article on author's blog.
disclaimer: have never used tpm doing crypto please validate thoughts.
ps: forgot opencryptoki pkcs#11 driver resides in /usr/lib/opencryptoki/libopencryptoki.so
.
Comments
Post a Comment