pkcs规范培训学习.pptxVIP

写在前面的;PKCS11是什么;为什么会有PKCS11;PKCS11能干什么;PKCS11的特点;内容;关于PKCS#11;7816-1/2/3/4/5/6/8;内容;概述;概述;概述;概述;概述;概述;概述;概述;概述;概述;概述;概述;概述;内容;基本概念;3.1 Slot Token ;基本概念;基本概念;基本概念;Cryptoki provides functions for creating, destroying, and copying objects in general, and for obtaining and modifying the values of their attributes. Some of the cryptographic functions (e.g., C_GenerateKey) also create key objects to hold their results. Objects are always “well-formed” in Cryptoki—that is, an object always contains all required attributes, and the attributes are always consistent with one another from the time the object is created. This contrasts with some object-based paradigms where an object has no attributes other than perhaps a class when it is created, and is uninitialized for some time. In Cryptoki, objects are always initialized.;A token can hold several identical objects, i.e., it is permissible for two or more objects to have exactly the same values for all their attributes. In most cases each type of object in the Cryptoki specification possesses a completely well-defined set of Cryptoki attributes. Some of these attributes possess default values, and need not be specified when creating an object; some of these default values may even be the empty string (“”). Nonetheless, the object possesses these attributes. A given object has a single value for each attribute it possesses, even if the attribute is a vendor specific attribute whose meaning is outside the scope of Cryptoki. In addition to possessing Cryptoki attributes, objects may possess additional vendor specific attributes whose meanings and values are not specified by Cryptoki. ;基本概念;3.5 Sessions;3.6 状态转换（与Session有关） 一个打开的会话可以在几种状态之一。会话状态决定通向对象和在会话上执行的函数允许的通道 。;;State ;;RW session;状态转换 – 会话权限;Session events; 在Cryptoki Version 2.1中, 使用令牌的一个应用程序的所有会话必须有相同的登录/注销状态（对于一个给定的应用程序和令牌，只能处于下列情况之一：所有会话是公共会话，所有会话是SO会话或所有会话是用户会话）。当一个应用程序的会话登录一个令牌，使用该令牌的应用程序的所有会话也被登录；当一个应用程??的会话注销一个令牌，该应用程序的所有会话也被注销。同样，例如，如果使用令牌的