PKCS11 Software token for symmetric keys

Rick van Rein rick at openfortress.nl
Wed Jul 5 14:31:29 UTC 2023


Hi Hrithik,

>I am looking for source or any resources really for a software token that can be used with p11-kit. In an environment where p11-kit is really the only pkcs11 aware application, I would like to use a software token to store keys, and perform certain crypto operations with those keys. So far, the only modules I've been able to find have been related to certificate storage and use, not storage of symmetric keys.

Most tokens implement symmetric key operations.  A faithful (intended-complete) software implementation is SoftHSMv2 from the OpenDNSSEC project,
https://github.com/opendnssec/SoftHSMv2

Cheers,
  -Rick


More information about the p11-glue mailing list