wolfBoot is a portable, OS-agnostic, secure bootloader for microcontrollers, supporting firmware authentication and firmware update mechanisms.
 
 
 
 
 
 
Go to file
Sean Parkinson 86610c26ba
Merge pull request #13 from dgarske/v1.1
wolfPKCS v1.1 release prep
2022-05-09 09:11:11 +10:00
m4 Initial Revision 2018-10-18 11:48:47 +10:00
src wolfPKCS v1.1 release prep 2022-05-06 16:31:34 -07:00
tests Minor cleanups for cast, spelling and pkcs11str test directory/token environment variable. 2022-04-21 11:28:45 -07:00
wolfpkcs11 wolfPKCS v1.1 release prep 2022-05-06 16:31:34 -07:00
.gitignore Add supprt for storage of token data 2022-03-30 15:44:36 +10:00
LICENSE Convert repository to GPLv3. 2022-02-08 11:26:55 -08:00
Makefile.am Fixes for packaging with `make dist`. Was missing a few files. 2021-10-27 12:55:56 -07:00
README.md wolfPKCS v1.1 release prep 2022-05-06 16:31:34 -07:00
autogen.sh Initial Revision 2018-10-18 11:48:47 +10:00
commit-tests.sh Initial Revision 2018-10-18 11:48:47 +10:00
configure.ac wolfPKCS v1.1 release prep 2022-05-06 16:31:34 -07:00
coverage.sh Initial Revision 2018-10-18 11:48:47 +10:00
gpl-3.0.txt Convert repository to GPLv3. 2022-02-08 11:26:55 -08:00
include.am Initial Revision 2018-10-18 11:48:47 +10:00
pre-commit.sh Initial Revision 2018-10-18 11:48:47 +10:00

README.md

wolfPKCS11

PKCS#11 library that implements cryptographic algorithms using wolfSSL.

Project Features

Building

Build wolfSSL:

git clone https://github.com/wolfSSL/wolfssl.git
cd wolfssl
./autogen.sh
./configure --enable-rsapss --enable-keygen --enable-pwdbased --enable-scrypt C_EXTRA_FLAGS="-DWOLFSSL_PUBLIC_MP -DWC_RSA_DIRECT"
make
make check
sudo make install
sudo ldconfig

autogen.sh requires: automake and libtool: sudo apt-get install automake libtool

Build wolfPKCS11:

git clone https://github.com/wolfSSL/wolfPKCS11.git
cd wolfPKCS11
./autogen.sh
./configure
make
make check

Build options and defines

Define WOLFPKCS11_NO_STORE

Disables storage of tokens.

Define WOLFPKCS11_CUSTOM_STORE

Removes default implementation of storage functions. See wolfpkcs11/store.h for prototypes of functions to implement.

Define WOLFPKCS11_KEYPAIR_GEN_COMMON_LABEL

Sets the private key's label against the public key when generating key pairs.

Environment variables

WOLFPKCS11_TOKEN_PATH

Path into which files are stored that contain token data. When not set, defaults to: /tmp

WOLFPKCS11_NO_STORE

Set to any value to stop storage of token data.

Release Notes

wolfPKCS11 Release 1.1 (May 6, 2022)

  • Added support for CKM_AES_CBC_PAD
  • Added support for storage of token data.
  • Added support encrypted private keys.
  • Added CKF_LOGIN_REQUIRED to the slot flags.
  • Added RSA X_509 support for signing/verifying
  • Added missing CK_INVALID_SESSION.
  • Added some missing PKCS11 types.
  • Fixed building with FIPS 140-2 (fipsv2).
  • Fixed WP11_API visibility.
  • Fixed test pin to be at least 14-characters as required by FIPS HMAC.
  • Fixed getting a boolean for the operations flags.
  • Fixed misleading indentation fixes.
  • Improve the curve_oid lookup with FIPS.
  • Removed config.h from the public pkcs11.h header.
  • Convert repository to GPLv3.

wolfPKCS11 Release 1.0 (October 20, 2021)

  • Initial PKCS11 support