This repository has been archived by the owner on Dec 4, 2019. It is now read-only.

Add HSM support via PKCS 11 #27

Open

enj opened this issue Aug 13, 2018 · 0 comments

Owner

enj commented Aug 13, 2018

Use https://github.com/miekg/pkcs11 and possibly the extended wrapper https://github.com/ThalesIgnite/crypto11 to add HSM support.

Would require having a very different mode:

The current command based KEK mode where we do the crypto
An HSM mode where we send the DEK/EDEK to the HSM for all crypto operations

enj mentioned this issue

Consider moving to configuration file #28

Open

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.