Skip to content

Conversation

@johannww
Copy link
Contributor

@johannww johannww commented Aug 22, 2025

In the spirit of #29, I am trying to implement ed25519 support for PKCS11 bccsp. First I would like to ask if this interests the maintainers/contributors.

Anyway, I present what I have reached so far:

  • Bump on miekg/pkcs11 to branch v3, which supports ed25519.
  • Created necessary methods.
  • Created a signature/verify test, signing in the HSM (softhsm2) and verifying outside it

I would like to ask for assistance regarding the following topics:

  • I noticed that different HSM libraries return the ecPoint with a few extra bytes. For ed25519, I could identify and fix it for softhsm2. How can I test for opencryptoki?

https://github.com/johannww/fabric-lib-go/blob/4a8e7bea6c980371f53c6121cdcabd20a0611283/bccsp/pkcs11/pkcs11.go#L1007-L1021

Thank you for your attention in advance.

- This was tested with softhsm2
- Bump on miekg/pkcs11 to branch v3, which supports edwards

Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
@johannww
Copy link
Contributor Author

I adjusted somethings after testing with my fabric-ca fork that support ed25519 both on SW and PCKS11 bccsps: https://github.com/johannww/fabric-ca

Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Signed-off-by: Johann Westphall <johannwestphall@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant