python-pkcs11

python-pkcs11 copied to clipboard

`MechanismWithParam` was a hack to allow for various param mechanisms, but it doesn't scale. `mechanism_param` should be removed and `mechanism` be replaced to allow either a `CK_MECHANISM` or a `Mechanism`...

danni

SHA256 wrongly computed for data of size greater than 4kB

1

Reproduction conditions: python-pkcs11: version 0.6.0 operating system: Linux 4.13.0-39-generic x86_64 (Ubuntu) using pkcs11 middleware library for ePass2003: libcastle.so.1.0.0 command: "session.digest(data, mechanism=Mechanism.SHA256)" returns wrong hash if data is greater than 4kB...

StefWeg

wheel packages

2

New windows support sounds great so maybe wheel packages help to user to install faster and without compiler this lib. There is a lot of packages supporting wheels binaries and...

luisza

unpack throw exception

26

I have tried this pkcs11 lib on ubuntu 19.04 with python 3.7.3, run with a vendor HSM(EngageBlack), all works good. However, when I use it on an Linux from scratch...

Benjamin-Shengming

"FIXME: cancel the operation when we exit the generator early."

3

Hello, I'm facing this not-fixed issue due to cancelling an operation in the middle. In my specific case, I have to cancel before finishing; so I have to overcome this...

figbux

C_Login can fail with CKR_USER_ALREADY_LOGGED_IN

3

This happens fairly reliably if, within a loop that looks like this: ``` while True: try: with pkcs11lib.get_token(/**/).open(/**/) as session: key = session.get_key(/**/) while True: key.sign(/**/) except Exception: pass ```...

wjmelements

Update digest sample code in the docs

1

In the docs: `digest = session.digest(data, mechanism=Mechanism.SHA_256)` This would lead to the error: ` AttributeError(name) from None` It should be: `digest = session.digest(data, mechanism=Mechanism.SHA256)`

the-black-viper

Python int too large to convert to C ssize_t

8

``` ESC[36msigning_web |ESC[0m for public_obj in session.get_objects(PUBLIC_KEY_OBJECTS_FILTER): ESC[36msigning_web |ESC[0m File "pkcs11/_pkcs11.pyx", line 282, in pkcs11._pkcs11.SearchIter.__next__ ESC[36msigning_web |ESC[0m File "pkcs11/_pkcs11.pyx", line 599, in pkcs11._pkcs11.Object._make ESC[36msigning_web |ESC[0m File "pkcs11/_pkcs11.pyx", line 629, in...

wjmelements

Add an example for dealing with DATA objects to the readme

1

Just a proposal; I guess you might want to keep the documentation focused on dealing with public key crypto. Maybe it's time to make an example directory for the more...

h3po

CloudHSM Support

27

Hi! I'm wondering if there is a project to add CloudHSM on the list of supported devices. I can help with the implementation. Please tag this as feature request!

videlanicolas