6
$\begingroup$

Is there a known authoritative source for the ANSI C header files for PKCS#11 Cryptoki? Specifically, I am having trouble locating pkcs11.h, pkcs11t.h, and pkcs11f.h for v2.30 and v2.40. Are there known MD5 or SHA hashes for these files?

$\endgroup$
6
$\begingroup$

In May 2015, header files were uploaded to the OASIS PKCS 11 TC document repository by Dina Kurktchi-Nimeh that were versioned v2.40. However, they were uploaded to the "Working Drafts" folder. The meeting minutes from 2015-04-15 state that v2.40 is complete, but there is an action item for Dina to publish header files for v2.40 with errata (what would hopefully become v2.41). There is an action item for Chris (presumably Zimman?) to publish the final 2.40 (w/o errata) headers, but there are no uploads from him.

Official PKCS #11 v2.40 Announcement

pkcs11t.h

pkcs11f.h

pkcs11.h

2015-04-15 Meeting Notes

$\endgroup$
  • $\begingroup$ It's been a while, but I'm interested in how exactly do you go from Oasis web site to the PKCS11 header files, without using Google. That site is a nightmare to navigate! $\endgroup$ – KC Wong Nov 20 '17 at 7:34
  • 1
    $\begingroup$ @KCWong It's changed even since the last time I looked at it. I needed to find the SAML 2.0 Bindings spec the other day and had to go digging. Used to know exactly where it was. $\endgroup$ – Huckle Dec 2 '17 at 7:53
7
$\begingroup$

The PKCS#11 standard has transitioned from RSA to the OASIS group: https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=pkcs11

I am not sure why RSA/EMC's site doesn't mention this.

I believe that v2.30 was close to finalization, but was never formally released. I am not sure what happened but v2.40 is now the current release candidate.

v2.20 is the current revision and header files are accessible by following the link that Mr. Stone provided.

CryptSoft (Tim Hudson is a PKCS#11 leader) has a very good resource page: http://www.cryptsoft.com/pkcs11doc/

$\endgroup$
  • 2
    $\begingroup$ Yeah, it seems like the current 2.40 version is a release candidate, although I could not really understand the way versioning is realised or if the header files are going to be updated in any way. The OASIS website is IMHO insufficiently clear on this. $\endgroup$ – Maarten - reinstate Monica Jul 6 '15 at 13:51
0
$\begingroup$

The RSA page looks to be the place to go:

PKCS #11: Cryptographic Token Interface Standard http://www.emc.com/emc-plus/rsa-labs/standards-initiatives/pkcs-11-cryptographic-token-interface-standard.htm#

Although I don't see MD5 or SHA hashes.

$\endgroup$
  • $\begingroup$ Thanks, and I did see this page previously, the issue is it says the current version is v2.20. I understand v2.40 was recently finalized, but that doesn't explain what happened to v2.30. $\endgroup$ – user25339 Jun 30 '15 at 13:08
0
$\begingroup$

The OASIS PKCS 11 technical committee page can be found here: https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=pkcs11.

From that page, scrolling down to the "Technical Work Produced by the Committee" section, you find some concrete artefacts.

The official header files for v2.40, with errata, are found here: http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/errata01/os/include/pkcs11-v2.40/. There you will find the following files:

  • pkcs11.h
  • pkcs11f.h
  • pkcs11t.h
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.