PKCS #11 3.0 in OpenSC

[Jakuje]

In regards of #1854, I would like to bump version of PKCS #11 library to 3.0 and implement the new required interfaces in coming months.

The public review drafts are already available on OASIS website and I assume there will be no significant changes before the final version:

https://docs.oasis-open.org/pkcs11/pkcs11-base/v3.0/pkcs11-base-v3.0.html

So far, these are my thoughts about advantages of 3.0:

• Support for new key types (ed25519 -- see Add curve25519 support in OpenSC #1854)
• It is backward compatible -- new functions are available through C_GetInterfaceList and C_GetInterface
• Profile objects can resolve the issues with NSS and its handling of OpenSC as non-friendly by announcing the CKP_PUBLIC_CERTIFICATES_TOKEN profile (from https://docs.oasis-open.org/pkcs11/pkcs11-profiles/v3.0/pkcs11-profiles-v3.0.html )
• SHA3 support

I will probably go through the draft and try to create issues for particular tasks if it will be easy to separate them so anyone can help. I would probably like to create it as a project, but it looks like I do not have appropriate permissions to do that.

Any thoughts?

[frankmorgner]

Although we're currently often using 2.4 as reference for PKCS#11, we're announcing compatibility with 2.20 only:

OpenSC/src/pkcs11/pkcs11-global.c

Lines 408 to 409 in ee1c807

	pInfo->cryptokiVersion.major = 2;
	pInfo->cryptokiVersion.minor = 20;

I'm not sure what's the implication in terms of backward compatibility...

[Jakuje]

I think this is mostly done now. We might need some implementation of the function stubs, we might bring more algorithms as needed, but the base is in place.