PKCS#11 Provider

The Kryoptic offers a Rust implementation of a PKCS#11 provider. Leancrypto currently is in the process of providing a crypto backend which implies that leancrypto can be accessed via a PKCS#11 API.

PKCS#11 Protocol Support

The leancrypto support to the Kryoptic PKCS#11 token implementation offer the following algorithm support:

  • PBKDFv2

Testing

  1. clone leancrypto

  2. compile and install the HEAD: meson setup build && meson compile -C build && sudo meson install -C build && sudo ldconfig

  3. clone Kryoptic with leancrypto support

  4. symlink the leancrypto code repository into the root directory of Kryoptic

  5. build/test Kryoptic: cargo test -F leancrypto