corePKCS11 机制和摘要演示

/* The PKCS #11 standard defines a mechanism to be a "A process for


 * implementing a cryptographic operation." For example, the SHA-256 algorithm


 * will be the mechanism used in this demo to perform a digest (hash operation).


 *


 * The mechanism types are defined in "pkcs11t.h", and are prefixed CKM_, to


 * provide a portable way to identify mechanisms.


 */

CK_MECHANISM_TYPE xMechanismType = 0;



/* The CK_MECHANISM_INFO allows the application to retrieve the minimum and


 * maximum key sizes supported by the mechanism (could be in bits or bytes).


 * The structure also has a flags field that is populated with bit flags


 * for what features the mechanism supports.


 */

CK_MECHANISM_INFO MechanismInfo = { 0 };



xResult = pxFunctionList->C_GetMechanismInfo( pxSlotId[ 0 ],

                                              CKM_SHA256,

                                              MechanismInfo );

configASSERT( CKR_OK == xResult );



if( 0 != ( CKF_DIGEST & MechanismInfo.flags ) )

{

    configPRINTF( ( "The Cryptoki library supports the " \

    "SHA-256 algorithm.\r\n" ) );

}

else

{

    configPRINTF( ( "The Cryptoki library doesn't support the " \

    "SHA-256 algorithm.\r\n" ) );

}

/* Hash with SHA256 mechanism. */

xDigestMechanism.mechanism = CKM_SHA256;



/* Initializes the digest operation and sets what mechanism will be used


* for the digest. */

xResult = pxFunctionList->C_DigestInit( hSession,

                                        xDigestMechanism );

configASSERT( CKR_OK == xResult );



/* Pass a pointer to the buffer of bytes to be hashed, and its size. */

xResult = pxFunctionList->C_DigestUpdate( hSession,

                                          pxKownMessage,

                                          sizeof( pxKownMessage ) - 1 );

configASSERT( CKR_OK == xResult );



/* Retrieve the digest buffer. Since the mechanism is an SHA-256 algorithm,


* the size will always be 32 bytes. If the size cannot be known ahead of time,


* a NULL value to the second parameter xDigestResult, will set the third parameter,


* pulDigestLen to the number of required bytes. */

xResult = pxFunctionList->C_DigestFinal( hSession,

                                         xDigestResult,

                                         ulDigestLength );

configASSERT( CKR_OK == xResult );

#The "n" flag is set to strip new line characters.

$ echo -n "Hello world\ | openssl dgst -sha256

>>> import hashlib

>>> hashlib.sha256("Hello world!".encode("utf8")).hexdigest()