<html xmlns="http://www.w3.org/1999/xhtml" xmlns:html="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>
WindowsCSP – OpenSC
</title><style type="text/css">
@import url(trac.css);
</style></head><body><div id="content" class="wiki">
<div class="wikipage searchable">
<h1 id="WindowsCSP">Windows CSP</h1>
<p>
On Windows usualy all Applications use the Crypto API - a very high level and very generic framework.
If Applications use this framework, no changes are needed to use certificates and keys
not only from either files/registry but also from smart cards.
</p>
<p>
Such Applications can not use OpenSC directly. Instead they access the Crypto API on the upper side,
and a Crypto Service Provider needs to register smart card resource on the lower side.
That CSP can use OpenSC via the PKCS#11 API.
</p>
<p>
And of course you need the PC/SC Middleware and a driver for your smart card reader.
PC/SC is already included in Windows NT, 2000, XP and later.
</p>
<p>
The whole picture with all layers is:
</p>
<pre class="wiki" xml:space="preserve">+------------------------------------+
| Application |
+------------------------------------+
+============Crypto API==============+
| Middleware |
+==Crypto Server Provider Interface===+
+------------------------------------+
| Crypto Service Provider |
+--------------PKCS#11---------------+
| OpenSC-PKCS11.dll |
+--------------PC/SC-----------------+
| PC/SC Middleware |
+-------------Ifdhandler-------------+
| Smart card Reader Driver |
+------------------------------------+
</pre><h2 id="CSP11">CSP#11</h2>
<p>
CSP#11 is an open source implementation of the Crypto Service Provider API. It works with any PKCS#11 module
including the OpenSC-PKCS11.DLL included in OpenSC.
</p>
<p>
You can download CSP#11 at <a class="ext-link" href="http://csp11.labs.libre-entreprise.org/" shape="rect"><span class="icon"> </span>http://csp11.labs.libre-entreprise.org/</a>.
</p>
<p>
<a href="http://www.opensc-project.org/scb/" shape="rect">Smart card bundle</a> is our windows installer and it has a more detailed
web page about <a href="http://www.opensc-project.org/scb/wiki/CSP11" shape="rect">CSP11</a>.
</p>
<h2 id="IdendityAllianceCSP">Idendity Alliance CSP</h2>
<p>
Idendity Alliance also offers a CSP implementation in their
<a class="ext-link" href="http://www.identityalliance.com/identity_ally.php" shape="rect"><span class="icon"> </span>ID Ally</a> package.
(free for personal use, 30 days use for evaluation.)
</p>
<p>
<a href="http://www.opensc-project.org/scb/" shape="rect">Smart card bundle</a> is our windows installer and it has a more detailed
web page about <a href="http://www.opensc-project.org/scb/wiki/IdAlly" shape="rect">ID Ally</a>.
</p>
<h2 id="PKCSCSP">PKCS CSP</h2>
<p>
PKCS CSP is an open-source CSP to use PKCS#11 modules. It was developed by Ilex and may be downloaded free of charge. The package contains the source files needed to build the CSP as well as documentation in English and French.
</p>
<p>
<a class="ext-link" href="http://www.ilex.fr/en/opensource/pkcscsp.htm" shape="rect"><span class="icon"> </span>http://www.ilex.fr/en/opensource/pkcscsp.htm</a>
</p>
<p>
* <a class="wiki" href="PKCSCSPDesc.html" shape="rect">Description</a>
</p>
<h2 id="WindowsVista">Windows Vista</h2>
<p>
It looks like Microsoft will replace Crypto API with something new, but still
support Crypto API. More information can be found in this presentation:
<a class="ext-link" href="http://blog.blanar.net/files/FUN210_Ben-Menahem_Tucker.ppt" shape="rect"><span class="icon"> </span>http://blog.blanar.net/files/FUN210_Ben-Menahem_Tucker.ppt</a>
</p>
</div>
</div><div class="footer"><hr></hr><p><a href="index.html">Back to Index</a></p></div></body></html>
distrib
>
Fedora
>
13
>
x86_64
>
media
>
updates
>
by-pkgid
>
64d7525dee9596ae0eae9ecd4241861b
>
files
>
140
