Skip to content
BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

107 Commits
C
C
 
 
ep11
ep11
 
 
Makefile
Makefile
 
 
README.md
README.md
 
 
aescreatekey.go
aescreatekey.go
 
 
aescreatekeysession.go
aescreatekeysession.go
 
 
aesdecrypt.go
aesdecrypt.go
 
 
aesencrypt.go
aesencrypt.go
 
 
aesreencrypt.go
aesreencrypt.go
 
 
aesunwrap.go
aesunwrap.go
 
 
aeswrap.go
aeswrap.go
 
 
benchmark4.go
benchmark4.go
 
 
blsaggregatepk.go
blsaggregatepk.go
 
 
blsaggregatesig.go
blsaggregatesig.go
 
 
checksumenczero.go
checksumenczero.go
 
 
createblskeypair.go
createblskeypair.go
 
 
creategenerickey.go
creategenerickey.go
 
 
createmldsakeypair.go
createmldsakeypair.go
 
 
createmlkemkeypair.go
createmlkemkeypair.go
 
 
createseed.go
createseed.go
 
 
derivekey.go
derivekey.go
 
 
derivekeybls.go
derivekeybls.go
 
 
eccreatekeypair.go
eccreatekeypair.go
 
 
ecdh.go
ecdh.go
 
 
ecunwrap.go
ecunwrap.go
 
 
ecunwrap2.go
ecunwrap2.go
 
 
ecwrap.go
ecwrap.go
 
 
ecwrapbackup.go
ecwrapbackup.go
 
 
ep11admin.go
ep11admin.go
 
 
ep11audit.go
ep11audit.go
 
 
ep11cardadmin.go
ep11cardadmin.go
 
 
ep11cp.go
ep11cp.go
 
 
ep11export.go
ep11export.go
 
 
ep11getattr.go
ep11getattr.go
 
 
ep11load.go
ep11load.go
 
 
ep11login.go
ep11login.go
 
 
ep11mload.go
ep11mload.go
 
 
ep11scanmkvp.go
ep11scanmkvp.go
 
 
getmech.go
getmech.go
 
 
getpubfromskblob.go
getpubfromskblob.go
 
 
go.mod
go.mod
 
 
kmsapi.go
kmsapi.go
 
 
mlkemdecapsulate.go
mlkemdecapsulate.go
 
 
mlkemdecapsulatehybrid.go
mlkemdecapsulatehybrid.go
 
 
mlkemencapsulate.go
mlkemencapsulate.go
 
 
mlkemencapsulatehybrid.go
mlkemencapsulatehybrid.go
 
 
pkfixasn1.go
pkfixasn1.go
 
 
readattr.go
readattr.go
 
 
readblobmkvp.go
readblobmkvp.go
 
 
readprivblob.go
readprivblob.go
 
 
readpubblob.go
readpubblob.go
 
 
reencipher.go
reencipher.go
 
 
reencipher2.go
reencipher2.go
 
 
rsacreatekeypair.go
rsacreatekeypair.go
 
 
rsaunwrap.go
rsaunwrap.go
 
 
sessionunwrap.go
sessionunwrap.go
 
 
sessionwrap.go
sessionwrap.go
 
 
signbls.go
signbls.go
 
 
signmldsa.go
signmldsa.go
 
 
spkiunwrap.go
spkiunwrap.go
 
 
t2.go
t2.go
 
 
test.go
test.go
 
 
uncipherblob.go
uncipherblob.go
 
 
verifybls.go
verifybls.go
 
 
verifymldsa.go
verifymldsa.go
 
 

Repository files navigation

IBM EP11 library Go Bindings — IBM HSM Crypto Library for Go

Please find here a go wrapper to the IBM ep11 library used to execute cryptographic operation on IBM Hardware Security Module (IBM Crypto Express cards CX8S, CX7S) Alternative to opencryptoki

The library focus on Digital Assets related cryptography schema and elliptic curves : EcDsa, Slip10 and EIP2333 derivations, BLS12-381, ED25519, Secp256k1.

Fips Sessions, Master Key rotation (see reencipher samples) are supported.

Prerequisites:

  • IBM LinuxONE or IBM zSystems server using IBM Crypto Express cards.
  • ep11 libraries packages installed
  • Go 1.24+ tested

The master key on the HSM must be loaded and active.

About

Golang wrapper for IBM EP11 crypto library

Topics

cryptoexpressep11grep11hsmpkcs11

Resources

Readme
Activity

Stars

1 star

Watchers

2 watching

Forks

0 forks
Report repository

Releases

Packages

Used by

Contributors

Languages