get_command

If you want to create a signature with the used engine/token then you have to specify only DIGEST (the binary digest value that should be signed). If you want to create a normal signature then you must specify KEY and PASSWD.

If you want to use the engine then you must use ENGINE_USAGE ::= ALWAYS||PRIV_KEY_OPS too.

The signature will be done with the MD5 or SHA1/2 algorithm, the type and length is determined from the size of the content. Supported digest length are 128 (md5), 160 (sha1) and 224, 256, 384, 512 bits for sha2.

• DIGEST
• KEY
• PASSWD

hide_output

returns false

key_usage

returns true

get_result

returns the raw signature in binary format