Collaborate Disseminate
I’m new to virtualization and hypervisor environment. Is it possible to use PKCS#11 interface in virtual machines that are managed by a hypervisor such as Xen or similar? This question is that in a hypervisor environment, virtual TPM is wh… Continue reading PKCS#11 interface to work with Virtual TPM
I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard interface to work with both SoftHSM2 and HSM/TP… Continue reading Use of SoftHSM2 in commercial products
python-pkcs11 is throwing following error while installing in windows python 3.6
File: C:\Users\xxxx\AppData\Local\Temp\easy_install-g7qs04s2\python-pkcs11-0.5.0\pkcs11\_pkcs11.pyx
tree = Parsing.p_module(s, pxd, full_module_name)
_load… Continue reading python-pkcs11 is not working in windows 10 + python 3.6 [migrated]
Seeking assistance on using PKCS11 with a remote HSM.
I have a small linux host with an HSM card installed. The HSM has libraries and utility scripts provided to interact with it, on that host. These include a pkcs11 utility. What I can… Continue reading pkcs11 with remote HSM
I was testing key generation on a Hardware Security Module and I noticed that it takes so much time to generate an AES 256 secret key on the HSM.
I’ve used pkcs11-tool to generate the key and it took about 5 sec to complete the task:
$ pkc… Continue reading Why does it take so much time to create a secret key on a HSM?
Is there a way to list all keys inside the Utimaco HSM, created by PKCS11 interface and cngtool?
currently, I only can view each of them separately:
PKCS11: using "PKCS#11 CryptoServer Administration" interface.
CNG keys using th… Continue reading List all keys in Utimaco HSM created by PKCS11 and CNG?
I’m trying to sign a CSR using python-asn1crypto and python-pkcs11. I have an ECC Keypair stored in a Hardware Security Module (HSM).
Here’s a code sample:
key = decode_ec_public_key(encode_ec_public_key(pub))
info = CertificationRequestI… Continue reading Signing CSR using an ECC keypair
First off let me say I’m fully aware this question can only be answered by the token vendor but I have already contacted them and with the whole COVID situation my hopes of hearing from them soon are not high (nor that I need to, this is j… Continue reading Cryptoki PKCS11 C_Decrypt returns shorter key (decrypted message) than expected
I’m trying to wrap AES keys with an AES key using PKCS#11. Keys to be wrapped have the attribute CKA_WRAP_WITH_TRUSTED but the wrapping AES key(KEK) have the CKA_TRUSTED = false and still the wrapping works. Shouldn’t this be impossible. A… Continue reading Wrap keys with an AES key
I have implemented a solution where I can decrypt DUKPT taking 10 bytes of KSN, and derive a key using a vendor defined mechanism. This vendor defined mechanism uses the existing parameter of CK_KEY_DERIVATION_STRING_DATA. I tried to imple… Continue reading PKCS11, softHSM, and vendor defined mechanism