Overview

PKCS #11 Crypto Abstraction Library.

PKCS #11 is a standard maintained by OASIS for interacting with cryptographic hardware.

— Official documentation of PKCS #11 from oasis

This corePKCS11 library implements a subset of the PKCS #11 API required to establish a secure connection to AWS IoT:

• Verifying the signature of the contents of a message.
• Signing a message.
• Managing certificates and keys.
• Generating random numbers.

Memory Requirements

Memory requirements of the PKCS #11 library.

Code Size of corePKCS11 (example generated with GCC for ARM Cortex-M)
File	With -O1 Optimization	With -Os Optimization
core_pkcs11.c	0.8K	0.8K
core_pki_utils.c	0.5K	0.3K
core_pkcs11_mbedtls.c	8.7K	7.3K
Total estimates	10.0K	8.4K