[Opendnssec-user] Information about SoftHSM v2 - signing operation

[Rickard Bellgrim]

On Wed, Apr 15, 2015 at 11:09 AM, Elizabeta <elizabeta.fourneret at gmail.com>
wrote:

> In addition, concerning the key generation are there any advises when to
> use the function C_CreateObject instead of C_GenerateKey ? I'm rising this
> question since, as given in the specification, we can use both of them for
> key generation. But  what would be the best choice?
>

Best option is C_GenerateKey, this will generate the key on-board.
C_CreateObject is just an import function, thus no control over the key
generation process.

// Rickard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20150415/024cc49d/attachment.htm>