golang/

Overview

1. Install Golang and ensure that your cloned repository is in your GOPATH.

2. Update the following information in the examples/credential.yaml file.

   url: "<grep11 server url>"
   cert_path: "<client certificate path>"
   key_path: "<client key path>"
   cacert_path: "ca certificate path"
   

3. cd $GOPATH/src/github.com/hodlbirb/hpcs-bip32/golang/examples

4. Execute the examples by issuing the command: go test -v

5. The sample program produces output similar to the following:

   === RUN   Example_getMechanismInfo
   --- PASS: Example_getMechanismInfo (0.02s)
   === RUN   Example_encryptAndDecrypt
   --- PASS: Example_encryptAndDecrypt (0.03s)
   === RUN   Example_digest
   --- PASS: Example_digest (0.02s)
   === RUN   Example_signAndVerifyUsingRSAKeyPair
   --- PASS: Example_signAndVerifyUsingRSAKeyPair (0.66s)
   === RUN   Example_signAndVerifyUsingECDSAKeyPair
   --- PASS: Example_signAndVerifyUsingECDSAKeyPair (0.04s)
   === RUN   Example_signAndVerifyToTestErrorHandling
   --- PASS: Example_signAndVerifyToTestErrorHandling (0.04s)
   === RUN   Example_wrapAndUnwrapKey
   --- PASS: Example_wrapAndUnwrapKey (0.65s)
   === RUN   Example_deriveKey
   --- PASS: Example_deriveKey (0.11s)
   === RUN   Example_tls
   --- PASS: Example_tls (0.05s)
   PASS
   ok  	github.com/hodlbirb/hpcs-bip32/golang/examples	1.667s
   

General Function Call Workflow

GREP11 can perform encrypt, decrypt, digest, sign and verify operations. For each operation, there are a series of sub-operations or functions.

For example, the Encrypt operation consists of EncryptInit(), Encrypt(), EncryptUpdate(), EncryptFinal() and EncryptSingle() sub-operations.

GREP11 sub-operations for Encrypt:

• EncryptInit() is used to initialize an operation

• Encrypt() is used to encrypt data without the need to perform EncryptUpdate() or EncryptFinal() sub-operations. EncryptInit() must be run prior to the Encrypt() call

• EncryptUpdate() is used to perform update operations as part of a multi-part operation

• EncryptFinal() is used to perform final operations as part of a multi-part operation

• EncryptSingle() is an IBM EP11 extension to the standard PKCS#11 specification and used to perform a single call without the need to use the Init, Update, and Final sub-operations

The following diagram shows the three calling sequence flows that can be used for Encrypt, Decrypt, Digest, Sign and Verify operations: