0000747: Implement DKMS/EKMF support for OpenPGP

FLAM® Issue Tracker

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0000747

FL5

2.2 Subprogram FLUC (CONV)

public

2015-10-29 09:53

2016-07-26 15:37

Reporter

Falk Reichbott

Assigned To

Mykhailo Moldavskyy

Priority

normal

Severity

feature

Reproducibility

N/A

Status

resolved

Resolution

no change required

Platform

General

OS Version

General

Product Version

Target Version

5.1.13

Fixed in Version

5.1.13

Summary

0000747: Implement DKMS/EKMF support for OpenPGP

Description

A FKM5DKMS must be provide to support OpenPGP with DKMS/EKMF. The IBM crypto competance centre (CCC) plans to support PGP key files/rings with DKMS. If this support available the management of the PGP PKA keys can be done with DKMS instead of the FLCL KEY command. In this case a new FKM5 for DKMS must be written, wich use the DKMS-API to get the key lable for session key encryption / decryption or signature generation / verification. DKMS will store the PGP key attributes (KeyId, key version, creation date, valid days, prefered stuff) in the UKDS7 database. The FKM5 provides the KeyId or the UserId to get the key in the PKDS.This solution are indepentant of CCA key label conventions at all and the key management part are done with DKMS.

The FKM5 for DKMS will not support the FLCL KEY key management function. This FKM5 will only support the operational functions against CCA/ICSF (and if available with DKMS/EKMF against PKCS#11 or other crypto devices).

Tags

No tags attached.

Attached Files

Relationships

Notes
(0001014) Falk Reichbott (administrator) 2016-07-26 15:37	The DKMS/EKMS support is given with based on the PGP key ring support of FLAMv5.1.13. This support a RFC4880 PGP trust store together with a CCA/ICSF PKDS. DKMS/EKMF must simply add support for managing PGP trust stores. This support can be ordered by DKMS/EKMF customers and will be implemented on request. FLAM don't need a special DKMS/EKMF integration for PGP.

Issue History
Date Modified	Username	Field	Change
2015-10-29 09:53	Falk Reichbott	New Issue
2015-10-29 09:53	Falk Reichbott	Status	new => assigned
2015-10-29 09:53	Falk Reichbott	Assigned To	=> Mykhailo Moldavskyy
2015-10-29 10:04	Falk Reichbott	Target Version	5.1.11 => 5.1.13
2016-07-26 15:37	Falk Reichbott	Note Added: 0001014
2016-07-26 15:37	Falk Reichbott	Status	assigned => resolved
2016-07-26 15:37	Falk Reichbott	Fixed in Version	=> 5.1.13
2016-07-26 15:37	Falk Reichbott	Resolution	open => no change required