Pkcs # 11 Conformance Test System Research And Realization

As cryptography begins to see wide application and acceptance, one thing is increasingly clear: if it is going to be as effective as the underlying technology allows it to be, there must be interoperable standards. Even though vendors may agree on the basic cryptographic techniques, compatibility between implementations is by no means guaranteed. Interoperability requires is also not strict adherence to agreed-upon standards. This make a lot of inconvenient to consumer, the security service is hard to share. So, it must provide an unified interface for every encryption device which can be transplanted.To get this goal, the Public Key Cryptographic Standard (PKCS) is a token interface of cipher defined by RSA enterprise, cipher profession, academic circles and the delegate of government. PKCS#11 is the standard of encryption device interface.it is base on cipher programming of PKI, it abstract the technique details of cipher device, provide a common logic model and a complete interface of algorithm for cipher application program.This standard can ascertain an application design interface for those devices which preserve cipher information and execute cipher function, this interface is called Cryptoki whose full name is cryptographic token interface, it follow a sample way base on object, to bring up the goal of technique independent and resources enjoy, provide the device common logic illustration which is cipher token to application program.To achieve the consistence with PKCS#11 and get up to test whether the device conform to this standard, we developed system of PKCS#11 consistence test. To be aimed at different encryption device, this system testing interface,data type,total function,the core function(user and common use) and Profile framework. Testing whether the device to realize the standard,how much it realize and whether it is correct. Having the special design which are the interface for other algorithm and input the key.After testing, the system can mimeograph the testing table and log for user refer and compare. To analyse and research PKCS#11, this article particularly describe the system's design structure,technique method,program for coming true and the system's performance.