[Cryptography-dev] AES Key Type Issue

2025-01-19 Thread Sriram R via Cryptography-dev
Hello, I'm testing a softHSM2 setup with the following code on rhel 9.4 system running in FIPS mode: import pkcs11 from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes lib = pkcs11.lib("/usr/local/lib/softhsm/libsof

Re: [Cryptography-dev] AES Key Type Issue

2025-01-19 Thread Paul Kehrer via Cryptography-dev
The key handle you get from PKCS11 is not compatible with the symmetric cipher interfaces of cryptography. For asymmetric keys it's possible to create classes using our key interfaces that will allow use of opaque types, but the symmetric API is not capable of this at this time. -Paul On Sun, Jan