CryptoToken Framework Concepts

CryptoToken framework provides interfaces that can be extended to manage certificates, keys and certificate applications. This sections explains the extended frameworks, which provides appropriate interfaces for implementing certificate store, key store and certificate application stores.

• Certificate Store Framework
  Certificate store (certstore) framework provides interfaces for implementing certstore. A certstore is a database that stores certificates. The framework provide functionalities such as generation, storage and retrieval of certificates, assigning trust status to certificates and retrieving list of applications trusting a certificate.
• Keystore Framework
  Keystore framework provides interfaces for implementing a keystore. A key store is a repository of keys that can be stored and retrieved to perform cryptographic operations such as listing stored keys, generating, importing and exporting of RSA, DSA, and DH key pairs and performing private key operations for authenticated users of phone.
• Certificate Application Framework
  Certificate applications (certapps) framework provides interfaces for implementing certapp stores. A certapps store holds a list of clients that trust the certificates (root certificate) stored in the certificate store (certstore). For example, certificates associated with TLS are held in certstore and applications that trust these certificates are held in certapps store.