yubihsm-shell
yubihsm-shell copied to clipboard
Yubico
yubihsm-shell and libyubihsm
This PR introduces the `yubihsm-unwrap` command, the other half of `yubihsm-wrap`. It allows encrypted key backups ("offline wraps") to be decrypted using the wrap key. This is useful in cases...
Integrate PKCS#11 library with yubihsm-auth authentication. When prompted by PKCS#11 to enter PIN code you need to enter "#$label#$key_id$pin" where - $label is the credential label in yubihsm-auth - $key_id...
cmake settings ```console -- Cache values BASH_PROGRAM:FILEPATH=/usr/bin/bash BUILD_ONLY_LIB:BOOL=OFF CMAKE_BUILD_TYPE:STRING=RelWithDebInfo CMAKE_INSTALL_PREFIX:PATH=/usr ENABLE_ASYMMETRIC_AUTH:BOOL=ON ENABLE_COVERAGE:BOOL=OFF ENABLE_YKHSM_AUTH:BOOL=ON GENGETOPT_EXECUTABLE:FILEPATH=/usr/bin/gengetopt HELP2MAN_LOCATION:FILEPATH=/usr/bin/help2man SUPRESS_MSVC_WARNINGS:BOOL=ON YUBIHSM_INSTALL_BIN_DIR:PATH=/usr/bin YUBIHSM_INSTALL_INC_DIR:PATH=/usr/include YUBIHSM_INSTALL_LIB_DIR:PATH=/usr/lib64 YUBIHSM_INSTALL_MAN_DIR:PATH=/usr/share/man YUBIHSM_INSTALL_PKGCONFIG_DIR:PATH=/usr/share/pkgconfig ``` And .. test suite fails with ```console +...
Hi, I am having problems creating a crypto token in ejbca with YubiHSM2. the error is the following : [P11 - ERR 21:10:53.246143] util_pkcs11.c:4593 (parse_rsa_generate_template): Boolean truth check failed for...
PKCS11 3.0 support, and also added ed25519 support, mechanisms for which were added in pkcs11 3.0
Hello, I recently acquired a YubiHSM 2 device and am keen to delve deeper into its capabilities. Specifically, I'm interested in understanding its potential for manual configuration and the feasibility...
Would it be possible to do something like add a C interface to https://github.com/Chia-Network/bls-signatures and release the capability to create BLS signatures in a firmware update? This would be a...
I'm running into an issue signing a SHA3-384 hash of one of our images(SHA3-384 is required by the ROM of our device so we can't change what's used). Since yubihsm...
Hi, Currently, I'm using yubihsm with the openssl commandline through the pkcs11 module and the signing works for a bit but then gradually we run into the error: "Failed to...