Cryptographic security module method and apparatus

摘要

A cryptographic security module holds a cryptographic key having a private part and a public part. The private part is held within the module and is usable only to sign messages generated within the module. The public part can be extracted from the module and is usable by a warranting authority to generate a warrant for the module. The module may be used to generate a new key and the private part of the cryptographic key used to generate a key-generation certificate by signing a key-generation message containing information by which the new key can be identified.