KI_ExtendedToken

KI_KeypairToken

KI_KeypairToken

Purpose:

This KI allows you to specify the software-based token form of a public and private

key pair of type RSA or DSA. Seefor the token form of a symmetric key.

Type of information this allows you to use:

software-based token forms of RSA or DSA public and private key pairs. Backward- compatible with KI_Token.

Format of info supplied to B_SetKeyInfo:

pointer to a KI_KEYPAIR_TOKEN_INFO structure:

typedef struct {

KI_TOKEN_INFOkeyDataStruct; A_X509_KEYPAIR_ATTRIB_INFO attributes;

}KI_KEYPAIR_TOKEN_INFO;

where A_X509_KEYPAIR_ATTRIB_INFO is defined by:

typedef struct {

 

A_KEYPAIR_DEFINER

externalSpecs;

unsigned long

dateOfBirth;

}A_X509_KEYPAIR_ATTRIB_INFO;

and A_KEYPAIR_DEFINER is defined by:

typedef struct

{

 

 

 

unsigned int

keyUsage;

/* X509

key

usage bit map */

UINT4

lifeTime;

/* Key lifetime; under

consideration */

unsigned int

protectFlag;

/* Store key

in encrypted form */

}A_KEYPAIR_DEFINER;

Format of info returned by B_GetKeyInfo:

pointer to a KI_KEYPAIR_TOKEN_INFO structure.

2 7 4

R S A B S A F E C r y p t o - C L i b r a r y R e f e r e n c e M a n u a l

Page 284
Image 284
RSA Security 5 manual KIKeypairToken, Pointer to a Kikeypairtokeninfo structure, Akeypairdefiner is defined by