NCryptoki

After the latest release of NCryptoki and NDigitSign, we defined the new roadmap.

We were still working on Silverlight version but we had several stops to fulfill several urgent customers requests about NCryptoki and NDigitSign. One of the latest requests was related to a way to use/call a PKCS#11 token/HSM from a web page without using SIlverlight.

A smart solution that works on any browser, on any platform, is by using a JQuery Plugin that can be embedded in any web page and that supply a PKCS#11 interface to JavaScript.

We worked a lot on that and now we are happy to announce that we are ready to release the first PKCS#11 JQuery Plugin that allows to use a PKCS#11 token in any web page.

We are now finishing the documentation and In the next days we'll publish the first release.

We are having a lot of requests about our Digital Signature API, expecially for the part related to PDF Digital Signature.

In the past weeks we worked a lot to release a new version of NDigitSign with several new features and an updated example (FullTestDigitSign) that shows how to use all NDigitiSign functions.

Download it in the Downlod section and try it.

We are happy to announce that we are working on the new version 2.0 that will support Silverlight.

Several customers asked us for a Silverlight version so we cannot avoid to port NCryptoki on the Silverlight platform.

We'll publish a beta version on this site very soon. Stay updated!

One of our customers asked an interesting questions:- "Is it possible to export a private key using NCryptoki?"

The answer is yes if, and only if, the private key is extractable (some tokens may not allow to extract a private key).
Below there is a snippet to export a private key:

 // Searchs for an RSA private key object
CryptokiCollection template = new CryptokiCollection();
template.Add(new ObjectAttribute(ObjectAttribute.CKA_CLASS, CryptokiObject.CKO_PRIVATE_KEY));
template.Add(new ObjectAttribute(ObjectAttribute.CKA_KEY_TYPE, Key.CKK_RSA));
            
// Launchs the search specifying the template just created
CryptokiCollection objects = session.Objects.Find(template, 1);

if(objects.count == 0)
{
     // PRIVATE KEY NOT FOUND
     return false;
}

// takes the first object as key
RSAPrivateKey privateKey = (RSAPrivateKey)objects[0];

// check if extractable
if(!privateKey.Extractable)
{
    // NOT EXTRACTABLE    
    return false;
}

// Extract modulus and private exponent
byte[] modulus = privateKey.Modulus;
byte[] privateExponent = privateKey.PrivateExponent; 

After the new release of Virtual Cryptoki, that fixes several known bugs (that many of you have asked for a long time), we have found a very strange bug in our Virtual Cryptoki. If the smart card service is down the Virtual Cryptoki generates an exception while opening a session.

We have fixed it in the new version 1.0.6.4.

This is the NCryptoki official blog.

We'll post news, case studies, technical matters, and so on about NCryptoki.