Research

PKCS #11 gives applications a common view of cryptographic devices. The key’s policy, lifecycle and operational meaning still depend on what lies behind the handle.

Supporting a second algorithm is easy. Moving a running system from one cryptographic regime to another is the real test of agility.

A secure session depends on more than fresh keys. The negotiation, participants and intended operation must be bound to the same cryptographic result.

Two messages can express the same data and still produce different signatures. Verification begins with the exact bytes a protocol chooses to protect.