Code samples for the PKCS #11 library (Client SDK 3)

The code samples on GitHub show you how to accomplish basic tasks using the PKCS #11 library.

Sample code prerequisites

Before running the samples, perform the following steps to set up your environment:

• Install and configure the PKCS #11 library for Client SDK 3.

• Set up a cryptographic user (CU). Your application uses this HSM account to run the code samples on the HSM.

Code samples

Code Samples for the AWS CloudHSM Software Library for PKCS#11 are available on GitHub. This repository includes examples on how to do common operations using PKCS#11 including encryption, decryption, signing and verifying.

• Generate keys (AES, RSA, EC)

• List key attributes

• Encrypt and decrypt data with AES GCM

• Encrypt and decrypt data with AES_CTR

• Encrypt and decrypt data with 3DES

• Sign and verify data with RSA

• Derive keys using HMAC KDF

• Wrap and unwrap keys with AES using PKCS #5 padding

• Wrap and unwrap keys with AES using no padding

• Wrap and unwrap keys with AES using zero padding

• Wrap and unwrap keys with AES-GCM

• Wrap and unwrap keys with RSA