Struct hsmtool::spxef::SpxEf

pub struct SpxEf { /* private fields */ }

SpxEf implements host-based SPHINCS+ signing with elementary files stored on a PKCS#11 token.

This is not as secure as signing on an HSM, but allows secure storage of the key material on a token. Every effort is made to destroy secret key material loaded to host RAM after use to prevent unintentional leaking of keys.

Implementations

impl SpxEf

pub fn new(session: Rc<Session>) -> Box<Self>

Trait Implementations

impl SpxInterface for SpxEf

fn get_version(&self) -> Result<String>

Get the version of the backend.

fn list_keys(&self) -> Result<Vec<KeyEntry>>

List keys known to the backend.

fn get_key_info(&self, alias: &str) -> Result<KeyInfo>

Get the public key info.

fn generate_key( &self, alias: &str, algorithm: &str, _token: &str, flags: GenerateFlags ) -> Result<KeyEntry>

Generate a key pair.

fn import_keypair( &self, alias: &str, algorithm: &str, _token: &str, overwrite: bool, public_key: &[u8], private_key: &[u8] ) -> Result<KeyEntry>

Import a key pair.

fn sign( &self, alias: Option<&str>, key_hash: Option<&str>, message: &[u8] ) -> Result<Vec<u8>>

Sign a message.

fn verify( &self, alias: Option<&str>, key_hash: Option<&str>, message: &[u8], signature: &[u8] ) -> Result<bool>

Verify a message.