PKCS#11 java card applet APDU CLA's & INS's

Hi,

How does the PKCS#11 API communicate with a java card applet?

I have developed a java card applet with all INS's (instructions) in CLA (class) - 84. From what I've gathered the GSM CLA is A0, the ISO CLA is 00, any proprietary CLA is 80 and proprietary with secure messaging CLA is 84.

I have read in another topic on this forum that the PKCS#11 API is an ISO standard and I was wondering if I am supposed to use 00 as the CLA in my applet.

Anyhow, I still don't understand how the Cryptoki functions of PKCS#11 communicate with the card applet. Does it use APDU's?

[606 byte] By [jash234a] at [2007-10-3 1:29:26]
# 1

> How does the PKCS#11 API communicate with a java card applet?

Just as you want. PKCS#11 is an general interface with is not restricted to smartcards. It hides the real communication with the token (in this case the JavaCard).

> I have read in another topic on this forum that the

> PKCS#11 API is an ISO standard and I was wondering if

> I am supposed to use 00 as the CLA in my applet.

I wouldn't do that. PKCS#11 is not an oncard standard and therefore your interface isn't standardized which means it is proprietary.

If you want to implement a standardized interface consider implementing the PKCS#15 standard. That is an oncard standard.

Jan

JPJavaa at 2007-7-14 18:27:14 > top of Java-index,Java Mobility Forums,Consumer and Commerce...