Hello,
I'm testing a softHSM2 setup with the following code on rhel 9.4 system
running in FIPS mode:
import pkcs11
from cryptography.hazmat.primitives import serialization
from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
lib = pkcs11.lib("/usr/local/lib/softhsm/libsof
The key handle you get from PKCS11 is not compatible with the symmetric
cipher interfaces of cryptography. For asymmetric keys it's possible to
create classes using our key interfaces that will allow use of opaque
types, but the symmetric API is not capable of this at this time.
-Paul
On Sun, Jan