Everyone,
My needs in the future will be to use TR-31-2018 format of key blocks to exchange with the outside world. My outside world does not support ISO:20038 yet.
My plan is to protect TDES keys. No AES or HMAC keys are anticipated at this time.
I will be protecting a series of different kinds of keys. (D0, P0, K0, etc.)
As I review the TR-31 Import & Export API calls, I believe I can specify one format or the other. But it is not clear to me how that is done. I've read and re-read the section on CSNBT31I/X API and it is just not gelling.
Might I get a hint from someone on what I need to focus on to learn about setting up this choice?
Sincerely,
------------------------------
Mark Vollmer
Developer, but does everything.
CV Systems, LLC
------------------------------