Public key cryptography for initial authentication(PKINIT) in kerberos

See more:

C++

C

C#

DLL

security

cryptography

, +

I am going to implement PKINIT in kerberos for my project. I am totally confused in starting the coding part, I know all the theoretical parts of kerberos like how client, KDC and Application server works.
I want help in implementation part like,
1. What are all the libraries and API's must one consider to develop PKINIT?
2. Does one can implement PKINIT by using API's like GSSAPI, SSPI?
3. Specifically about what API's or what libraries or what programming language does they brief in RFC documentations for PKINIT like http://www.ietf.org/rfc/rfc4556.txt[^]?
4. Will anything be beneficial for implementation of PKINIT from MIT http://web.mit.edu/kerberos/[^] which contains complete implemented form of kerberos?

Thanks in advance.