[security-dev 00306]: Re: ECC pkcs#11 bug

[Darren J Moffat]

Lars Silvén wrote:
> Hi Brad,
> 
> I have written a simple application that illustrates the problem: http://bunny.primekey.se/~lars/sunP11Bug/src/test/Main.java
> 
> But you need a p11 module with ECC capability to run it. Do you have one? If not I could investigate if one of our HSM vendors could send you one.

The pkcs11_softtoken PKCS#11 module on Solaris has Eliptic Curve support 
for the following mechanisms:

CKM_EC_KEY_PAIR_GEN
CKM_ECDSA
CKM_ECDSA_SHA1
CKM_ECDH1_DERIVE

-- 
Darren J Moffat