-
Type:
Bug
-
Status: Closed
-
Priority:
Minor
-
Resolution: Won't Fix
-
Affects Version/s: SoftHSM 2.x develop
-
Fix Version/s: None
-
Component/s: PKCS#11 Interface
-
Labels:None
When a (public, private or secret) key is created with CKA_PRIVATE=true, all the values are encrypted. It would be preferable to encrypt only private parts of the key. Indeed, it makes some known plaintext. For a public RSA key, no value (e, n) should be encrypted. For a private RSA key, only private values must be encrypted (p, q, ...) but not the public ones (n, e).