Code samples for the PKCS #11 library

The code samples on GitHub show you how to accomplish basic tasks using the PKCS #11 library.

Prerequisites

Before running samples, perform the following steps to set up your environment:

• Install and configure the PKCS #11 library for Client SDK 5.

• Set up a cryptographic user (CU). Your application uses this HSM account to run the code samples on the HSM.

Code samples

Code Samples for the AWS CloudHSM Software Library for PKCS#11 are available on GitHub. This repository includes examples on how to do common operations using PKCS#11 including encryption, decryption, signing and verifying.

• Generate keys (AES, RSA, EC)

• List key attributes

• Encrypt and decrypt data with AES GCM

• Encrypt and decrypt data with AES_CTR

• Encrypt and decrypt data with 3DES

• Sign and verify data with RSA

• Derive keys using HMAC KDF

• Wrap and unwrap keys with AES using PKCS #5 padding

• Wrap and unwrap keys with AES using no padding

• Wrap and unwrap keys with AES using zero padding

• Wrap and unwrap keys with AES-GCM

• Wrap and unwrap keys with RSA