PKCS#11

should protect sensitive objects even on a compromised hosts (PIN can be easily intercepted …) PKCS#11 Objects Objects are referenced via handles Every object has attributes Encrypt some data under the “orange key” sensitive: true encrypt: true decrypt: true PKCS#11 Key Management Create a new key inside the token Export a key encrypted under another key (WrapKey) Import a previously exported key (UnwrapKey) sensitive: true encrypt: true decrypt: true A well known attack sensitive: true wrap: true decrypt: true sensitive: true Wrap the green key with the red one This class of attacks can be prevented by imposing policies on the attributes (no need of new crypto mechanisms!) Decrypt i