| Design | |
| ▼PKCS #11 Sequence Diagrams | The following are sequence diagrams for common PKCS #11 operations |
| PKCS #11 RNG Sequence Diagram | Sequence diagram illustrating how to generate random bytes from PKCS #11 |
| PKCS #11 Digest Sequence Diagram | Sequence diagram illustrating how to create a message digest with PKCS #11 |
| PKCS #11 Object Import Sequence Diagram | Sequence diagram illustrating how to import an object with PKCS #11 |
| PKCS #11 Generate Key Pair Sequence Diagram | Sequence diagram illustrating how to generate a key pair with PKCS #11 |
| PKCS #11 Sign and Verify Sequence Diagram | Sequence diagram illustrating how to sign a hash and verify a signature with PKCS #11 |
| PKCS #11 Configuration Macros | These are the configuration macros used by the corePKCS11 Library |
| ▼PKCS #11 Mbed TLS Implementation Functions | Primary functions of the PKCS #11 Mbed TLS based Implementation Library: C_Initialize C_Finalize C_GetFunctionList C_GetSlotList C_GetTokenInfo C_GetMechanismInfo C_InitToken C_OpenSession C_CloseSession C_Login C_CreateObject C_DestroyObject C_GetAttributeValue C_FindObjectsInit C_FindObjects C_FindObjectsFinal C_DigestInit C_DigestUpdate C_DigestFinal C_SignInit C_VerifyInit C_Verify C_GenerateKeyPair C_GenerateRandom |
| C_Initialize | Initializes Cryptoki. |
| C_Finalize | Clean up miscellaneous Cryptoki-associated resources. |
| C_GetFunctionList | Obtains entry points of Cryptoki library functions. |
| C_GetSlotList | Obtains a list of slots in the system. |
| C_GetTokenInfo | Obtains information about a particular token. |
| C_GetMechanismInfo | Obtains information about a particular mechanism. |
| C_InitToken | Initializes a token. This function is not implemented for this port. |
| C_OpenSession | Opens a connection between an application and a particular token or sets up an application callback for token insertion. |
| C_CloseSession | Closes a session. |
| C_Login | Logs into a token. This function is not implemented for this port. |
| C_CreateObject | Creates an object. |
| C_DestroyObject | Destroys an object. |
| C_GetAttributeValue | Obtains an attribute value of an object. |
| C_FindObjectsInit | Initializes an object search operation. |
| C_FindObjects | Initializes an object search operation. |
| C_FindObjectsFinal | Finishes an object search operation. |
| C_DigestInit | Initializes a message-digesting operation. |
| C_DigestUpdate | Continues a multiple-part digesting operation. |
| C_DigestFinal | Finishes a multiple-part digesting operation. |
| C_SignInit | Initializes a signature operation. |
| C_VerifyInit | Initializes a verification operation. |
| C_Verify | Verifies a signature on single-part data. |
| C_GenerateKeyPair | Generates a public-key/private-key pair. |
| C_GenerateRandom | Generates random data. |
| ▼PKCS #11 Wrapper Functions | Primary functions of the PKCS #11 wrapper Library: xInitializePKCS11 xGetSlotList xInitializePkcs11Token xInitializePkcs11Session xFindObjectWithLabelAndClass vAppendSHA256AlgorithmIdentifierSequence |
| xInitializePKCS11 | Initializes a PKCS #11 session. |
| xGetSlotList | Get a list of available PKCS #11 slots. |
| xInitializePkcs11Token | Initializes a PKCS #11 module and token. |
| xInitializePkcs11Session | Initializes the PKCS #11 module and opens a session. |
| xFindObjectWithLabelAndClass | Searches for an object with a matching label and class provided. |
| vAppendSHA256AlgorithmIdentifierSequence | Appends digest algorithm sequence to SHA-256 hash for RSA signatures. |
| ▼PKCS #11 PAL Functions | Primary functions of the PKCS #11 Platform Abstraction Layer Library: PKCS11_PAL_Initialize PKCS11_PAL_SaveObject PKCS11_PAL_DestroyObject PKCS11_PAL_FindObject PKCS11_PAL_GetObjectValue PKCS11_PAL_GetObjectValueCleanup |
| PKCS11_PAL_Initialize | Initializes the PKCS #11 PAL. |
| PKCS11_PAL_SaveObject | Saves an object in non-volatile storage. |
| PKCS11_PAL_DestroyObject | Delete an object from NVM. |
| PKCS11_PAL_FindObject | Translates a PKCS #11 label into an object handle. |
| PKCS11_PAL_GetObjectValue | Gets the value of an object in storage, by handle. |
| PKCS11_PAL_GetObjectValueCleanup | Cleanup after PKCS11_GetObjectValue(). |
| ▼PKCS #11 Utils Functions | Primary functions of the PKCS #11 Utils Library: PKI_mbedTLSSignatureToPkcs11Signature PKI_pkcs11SignatureTombedTLSSignature |
| PKI_mbedTLSSignatureToPkcs11Signature | Converts an ECDSA P-256 signature from the format provided by mbedTLS to the format expected by PKCS #11. |
| PKI_pkcs11SignatureTombedTLSSignature | Converts and ECDSA P-256 signature from the format provided by PKCS #11 to an ASN.1 formatted signature. |