| The X.509 Standard |
In its simplest form, a
digital certificate could just contain a public key and
a name. To be useful, however, the certificate should
also contain other fields such as an expiration date,
the name of the CA that issued the certificate, a serial
number, and other pertinent information. The popular ITU
X.509 standard provides a structure for public-key
certificates. X.509 digital certificates include not
only an entity's name and public key, but also other
information about the entity. AuthAgent X.509 enables a
certificate authenticator to verify the certificate's
subject, and also obtain other trust-worthy information
about the certificate's subject. It provides flexible
APIs for validating certificates against a list of
trusted CAs and for customizing the certification
validation procedure based on various attributes
retrieved from the certificate.
|
| Digital Certificates |
| Public Key Cryptography
provides a form of encryption that uses a key pair that
consists of two related keys -- a public key and a
private key. This type of cryptography provides a
scalable form of encryption that does not rely on the
sharing of secrets. The public key can be used to verify
a message signed with the corresponding private key or
to encrypt a message that can only be decrypted using
the corresponding private key. A Digital Certificate
binds an identity to a key pair and is issued by a
trusted third-party called a Certificate Authority (CA).
It is digitally signed with the CA's private key after
it has verified the entity's identity and hence, it is
tamper-proof and easily portable which makes it ideal
for embedded device authentication. |
|
 |
Features |
 |
 |
 |
|
 |
Robust authentication framework using ITU-T
X.509 digital certificates |
|
|
Support for various PKCS formats and X.509v3
extensions |
|
|
Interoperable with standard X.509
implementations on other platforms |
|
|
Support for validating certificates against a
list of trusted certificates |
|
|
Support for Certificate Revocation List and OCSP |
|
|
APIs for customizing the certification
validation procedure |
|
|
Support for multiple CPU types of either
endian-ness including PowerPC, MIPS, X86,
ARM/XScale |
|
|
Royalty-free full source distribution |
|
|
 |
 |
 |
 |
|
|
