feat: PKCS11 provider library #208
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
bgrieder
force-pushed
the
pkcs11_provider
branch
from
9f9da2d to
c825b22
Compare
tbrezot
reviewed
Mar 18, 2024
Manuthor
changed the title
bgrieder
force-pushed
the
pkcs11_provider
branch
from
7ec3959 to
c9ffb8a
Compare
* ci: run binaries in clean env. also in debug mode * ci: increase size of tmp files * ci: test ckms without openssl * ci: test ckms without openssl * ci: fix windows build * ci: only build server just after openssl build * fix(ckms): remove println on CreateKeyPairAction
bgrieder
force-pushed
the
pkcs11_provider
branch
from
51c4e6e to
4b065bc
Compare
Manuthor
approved these changes
Mar 22, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR create a PKCS#11 provider library.
Its primary objective is to be compatible with Veracrypt.
The library is loaded in Veracrypt which will then fetch symmetric keys from the server tagged with word
disk-encryption. The library is using thekms.jsonon the machine for the server address and authentication.The PKCS#11 C ABI is provided by the native-pkcs11 project.
The provider library is in crate
pkcs11Since the library is also a client, like the CLI, a number of files have been moved from the
clito theclientandtest-servercrate, so that they can also be used by thepkcs11crate. Some structs have also been renamed to reflect the fact that they are not specific to the CLI anymoreMost of the changes of this PR are due to the refactoring.