(Chilkat2-Python) PKCS11 Import an Existing RSA Public Key onto the HSM

See more PKCS11 Examples

Demonstrates how to import an existing RSA Public Key onto a smart card or token.

Note: This example requires Chilkat v9.5.0.96 or later.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

pkcs11 = chilkat2.Pkcs11()

# Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
# (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
pkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"

# Establish a logged-on session.
pin = "0000"
userType = 1
success = pkcs11.QuickSession(userType,pin)
if (success == False):
    print(pkcs11.LastErrorText)
    sys.exit()

# Generate a new 2048-bit RSA key.
rsa = chilkat2.Rsa()
success = rsa.GenerateKey(2048)
if (success == False):
    print(rsa.LastErrorText)
    sys.exit()

# Get the public key information as XML, so we can access the modulus and exponent.
xml = chilkat2.Xml()
xml.LoadXml(rsa.ExportPublicKey())

attrs = chilkat2.JsonObject()
# Specify the type of object, and the type of key.
attrs.UpdateString("class","CKO_PUBLIC_KEY")
attrs.UpdateString("key_type","CKK_RSA")
# Add an optional label if desired.
attrs.UpdateString("label","RSA Public Key 1")
# Allow the key to be use for verify, wrapping, and encryption operations.
attrs.UpdateBool("verify",True)
attrs.UpdateBool("wrap",True)
attrs.UpdateBool("encrypt",True)

# Make this a session-only public key.
# To store the public key on the token so that it persists after the PKCS11 session, set token = True.
attrs.UpdateBool("token",False)

# Provide the RSA public key material
attrs.UpdateString("modulus",xml.GetChildContent("Modulus"))
attrs.UpdateString("public_exponent",xml.GetChildContent("Exponent"))

# Create the RSA public key.
# Returns the PKCS11 object handle of the created key.
objHandle = pkcs11.CreatePkcs11Object(attrs)
if (objHandle == 0):
    print(pkcs11.LastErrorText)
    print("Failed.")
else:
    print("PKCS11 object handle = " + str(objHandle))
    print("Successfully imported an RSA key..")

pkcs11.Logout()
pkcs11.CloseSession()