LirXCA-Token

The fundamental difference from the previous version is a work with hardware and program Token-AMI, the EDS of GOST P 3410-2001 implementing support of the Russian cryptographic algorithms, first of all, and having the PKCS#11 v.2.30 interface.

Important aspect of use of hardware tokens in the client bank systems, electronic document management systems, electronic biddings, etc. is that any possibility of unauthorized use by the malefactor of private key for counterfeit of the signature is excluded. It is reached by the fact that key pair forms on a token and all transactions with use of private key are also executed on the token (i.e. the private key never leaves a token). The only threat in this case is a theft of a token. But in this case, as well as in case of loss of the passport, it is necessary to notify timely Certification center in which the certificate of public key was received.

Already today at the market there are hardware tokens with support of the Russian cryptography, such as eToken GOST, ruToken, Shipka and others.

The LirXCA-Token complex is designed to make use of tokens convenient and simple.

This software product allows:

• initialize tokens;
• generate key pairs on a token;
• create requests for the certificate in the PKCS#10 format with formation of the signature on the token;
• issue certificates;
• import/export/destroy certificates and public keys on a token.