Reference Guide

38 Chapter 4: Hardware Support
RSA BSAFE Crypto-C Micro Edition 3.x to 4.1.4 Migration Guide
New Cryptographic Algorithms
The following algorithms are now supported on specific hardware devices:
• Elliptic Curve DSA (ECDSA)
• EC Diffie-Hellman (ECDH)
• RSA PSS
• HMAC SHA-2.
For elliptic curve operations, the full list of NIST-recommended named elliptic curves
supported by Crypto-C ME, is supported on specific PKCS #11 hardware devices for
specific operations.
For more information about the list of hardware devices tested with Crypto-C ME and
the cryptographic and key operations that can be performed, see Hardware Devices in
the RSA BSAFE Crypto-C Micro Edition Release Notes.
Tracing
Crypto-C ME 4.1.4 includes tracing capabilities for PKCS #11 hardware function
calls.
To implement PKCS #11 tracing:
1. Include the R_PROV_PKCS11_feature_trace feature in the feature set for a
PKCS #11 provider object. For example,
static const R_FEATURE *features[] =
{
&R_PROV_PKCS11_feature_trace,
R_FEATURE_END_OF_LIST
};
ret = R_PROV_PKCS11_new(NULL, features, &p11);
2. Create a tracing callback function. For example,
void do_trace(const R_TRACER *tracer, const char *message,
unsigned int len)
{
printf("%s\n", message);
}