mirror of https://github.com/wolfSSL/wolfBoot.git
wolfPKCS v1.1 release prep |
||
|---|---|---|
| m4 | ||
| src | ||
| tests | ||
| wolfpkcs11 | ||
| .gitignore | ||
| LICENSE | ||
| Makefile.am | ||
| README.md | ||
| autogen.sh | ||
| commit-tests.sh | ||
| configure.ac | ||
| coverage.sh | ||
| gpl-3.0.txt | ||
| include.am | ||
| pre-commit.sh | ||
README.md
wolfPKCS11
PKCS#11 library that implements cryptographic algorithms using wolfSSL.
Project Features
Building
Build wolfSSL:
git clone https://github.com/wolfSSL/wolfssl.git
cd wolfssl
./autogen.sh
./configure --enable-rsapss --enable-keygen --enable-pwdbased --enable-scrypt C_EXTRA_FLAGS="-DWOLFSSL_PUBLIC_MP -DWC_RSA_DIRECT"
make
make check
sudo make install
sudo ldconfig
autogen.sh requires: automake and libtool: sudo apt-get install automake libtool
Build wolfPKCS11:
git clone https://github.com/wolfSSL/wolfPKCS11.git
cd wolfPKCS11
./autogen.sh
./configure
make
make check
Build options and defines
Define WOLFPKCS11_NO_STORE
Disables storage of tokens.
Define WOLFPKCS11_CUSTOM_STORE
Removes default implementation of storage functions. See wolfpkcs11/store.h for prototypes of functions to implement.
Define WOLFPKCS11_KEYPAIR_GEN_COMMON_LABEL
Sets the private key's label against the public key when generating key pairs.
Environment variables
WOLFPKCS11_TOKEN_PATH
Path into which files are stored that contain token data. When not set, defaults to: /tmp
WOLFPKCS11_NO_STORE
Set to any value to stop storage of token data.
Release Notes
wolfPKCS11 Release 1.1 (May 6, 2022)
- Added support for CKM_AES_CBC_PAD
- Added support for storage of token data.
- Added support encrypted private keys.
- Added CKF_LOGIN_REQUIRED to the slot flags.
- Added RSA X_509 support for signing/verifying
- Added missing
CK_INVALID_SESSION. - Added some missing PKCS11 types.
- Fixed building with FIPS 140-2 (fipsv2).
- Fixed
WP11_APIvisibility. - Fixed test pin to be at least 14-characters as required by FIPS HMAC.
- Fixed getting a boolean for the operations flags.
- Fixed misleading indentation fixes.
- Improve the
curve_oidlookup with FIPS. - Removed
config.hfrom the public pkcs11.h header. - Convert repository to GPLv3.
wolfPKCS11 Release 1.0 (October 20, 2021)
- Initial PKCS11 support