Code samples for the PKCS #11 library for AWS CloudHSM Client SDK 5

The code samples on GitHub show you how to accomplish basic tasks using the PKCS #11 library for AWS CloudHSM Client SDK 5.

Prerequisites

Before running samples, perform the following steps to set up your environment:

Install and configure the PKCS #11 library for Client SDK 5.
Set up a cryptographic user (CU). Your application uses this HSM account to run the code samples on the HSM.

Code samples

Code Samples for the AWS CloudHSM Software Library for PKCS#11 are available on GitHub. This repository includes examples on how to do common operations using PKCS#11 including encryption, decryption, signing and verifying.

Generate keys (AES, RSA, EC)
List key attributes
Encrypt and decrypt data with AES GCM
Encrypt and decrypt data with AES_CTR
Encrypt and decrypt data with 3DES
Sign and verify data with RSA
Derive keys using HMAC KDF
Wrap and unwrap keys with AES using PKCS #5 padding
Wrap and unwrap keys with AES using no padding
Wrap and unwrap keys with AES using zero padding
Wrap and unwrap keys with AES-GCM
Wrap and unwrap keys with RSA

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Interpreting error codes

Advanced configurations