pkcs11

package

v0.3.2 Latest Latest Go to latest Published: Oct 23, 2023 License: Apache-2.0 Imports: 13 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

pkcs11 provides helpers for working with certificates via PKCS#11 APIs provided by go-pkcs11

This section is empty.

This section is empty.

func ParseHexString(str string) (i uint32, err error)

ParseHexString parses hexadecimal string into uint32

type Key struct {
	// contains filtered or unexported fields
}

Key is a wrapper around the pkcs11 module and uses it to implement signing-related methods.

func Cred(pkcs11Module string, slotUint32Str string, label string, userPin string) (*Key, error)

Cred returns a Key wrapping the first valid certificate in the pkcs11 module matching a given slot and label.

func (k *Key) CertificateChain() [][]byte

CertificateChain returns the credential as a raw X509 cert chain. This contains the public key.

func (k *Key) Close()

Close releases resources held by the credential.

func (k *Key) Decrypt(msg []byte, opts crypto.DecrypterOpts) ([]byte, error)

Decrypt decrypts a ciphertext message digest using the private key. Here, we pass off the decryption to pkcs11 library.

func (k *Key) Encrypt(plaintext []byte, opts any) ([]byte, error)

Encrypt encrypts a plaintext message digest using the public key. Here, we use standard golang API.

func (k *Key) Public() crypto.PublicKey

Public returns the corresponding public key for this Key.

func (k *Key) Sign(_ io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)

Sign signs a message.