On Wed, 2014-12-17 at 22:54 -0800, Jan Pechanec wrote:
+ Slot ID is a Cryptoki-assigned number that is not guaranteed stable
+ across PKCS#11 module initializations. However, slot description and
+ manufacturer ID may not be enough to uniquely identify a specific
+ reader. In situations where slot information is necessary use of
+ "slot-id" attribute may be justified if sufficient slot ID stability
+ is provided in the PKCS#11 provider itself or externaly.
Hello Jan,
I'd like to propose the following text instead:
"Slot ID is a Cryptoki-assigned number that is not guaranteed stable
across PKCS#11 module initializations. However, there are certain
libraries and modules which provide stable slot numbers and
descriptions. For these cases, when the manufacturer ID is not
sufficient to uniquely identify a specific reader, the slot
information could be used to increase the precision of the token
identification. In other scenarios, using the slot identifiers is
likely to cause usability issues."
That text discusses both the benefits and the risks.
regards,
Nikos