ctbrowse - Token Browser

The ctbrowse utility is a Windows GUI application for creating tokens and objects that perform simple operations, such as encryption, decryption, signing and verification of a signature, using the mechanisms provided by the token.

This utility allows you to create or view a key pair and certificates. By selecting an object, you can view its properties. If a certificate object is selected, you can view the structure (ASN.1 format) of the certificate and encode it to various formats such as Base64 or DER.

With ctbrowse, you can create and verify a signature based on the signing mechanism.

ctbrowse is part of the ProtectToolkit-C SDK and is installed as part of that product. See About the ProtectToolkit-C Administration Guide for more information.

Compliance

This application expects PKCS#11 V 2.20-compliant implementation and will use SafeNet extensions (see the next section) if they are available.

PKCS#11 Extensions Used

SafeNet's PKCS#11 implementation provides additional services beyond the standard definition of PKCS#11, particularly in the area of Certificate services. For example:

>Uses non-standard Attribute enumeration extension, although this version will fall back to standard methods to enumerate attributes where this extension is not available.

>PKCS#10 and X.509 creation from public key (see Drag and Drop)

>ASN.1 decoder/dumper

>Allows use of additional vendor defined mechanisms and extensions to PKCS#11

See ProtectToolkit-C Mechanisms for a table of SafeNet vendor-defined mechanisms and extensions to PKCS#11.

Using ctbrowse with ProtectToolkit-J

ProtectToolkit-J is SafeNet’s Java Cryptography Architecture (JCA) and Java Cryptography Extension provider (JCE) software.

Tokens and keys created with ProtectToolkit-J can be used and manipulated with ctbrowse. Likewise, any tokens and keys set up with ctbrowse will be fully compatible with ProtectToolkit-J. For more information, see Key Management.

This chapter contains the following sections:

>User Interface

>Token Management Services

>Cryptographic Services

>Drag and Drop

>Calculate Parameter Value for CK_RSA_PKCS_PSS_PARAMS