[Opendnssec-develop] draft of document describing the enforcer

[Rickard Bondesson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> Thoughts?

Some more thoughts:

10.11 Key creation
* C_DigestKey can only be used on secret keys, thus not applicable on asymmetric keys such as RSA key pairs. C_DigestKey digest the value of the key, but a RSA key does not have the CKA_VALUE attribute as secret keys do. pkcs11-tool also assume that the CKA_VALUE exists for RSA objects, but I can not find that anywhere in the PKCS#11.
-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSaK/i+CjgaNTdVjaAQik9gf/SXh+MmC+PLuMx83L5jq5lKTPqPYcOab/
Czc+8Xc8oYXhaurNgnfa/6qsISdCAfxUR68W0S34bRVD+gIPsQQQusoCOOTqucNX
BIbkkDEnzBwbQSCxPJm5m6wdhuNqJI3/XuPiJBfUoVa5E5WiVxKqrxmPh4SiTl7o
zJgJ23C/JzfNy/LNO8ukmbImHcc0FDvrcqC0t14hOo2wtSV6CkL3gqtKdDuXaOZ3
k1w+P3KyK3VL1q0C2Gm+rfZ3h94xO/A9fyU8Oup72PpG3UrMrsjgujhKSW5SJ0v9
aq9p0KRZvsYwfoTFVaFtp1zJfD3qerKpkQGmYdFbfcYa9Pw4duIKPw==
=GTul
-----END PGP SIGNATURE-----