Build a `CreateKeyPair` request for an `CoverCrypt` Master Key

Create an ML-DSA-44 CA and return (`cert_id`, `private_key_id`).

Get the current TTLV element which is the last element on the stack

This operation requests the server to perform a decryption operation on the provided data using a Managed Cryptographic Object as the key for the decr

This operation requests one or more attributes associated with a Managed Object. The object is specified by its Unique Identifier, and the attributes

Helper to obtain a pooled connection and configure session settings consistently - Isolation level: READ COMMITTED (reduces deadlocks vs REPEATABLE RE

Grants access to a user

List all the operations that have been granted to a user on an object These operations may have been directly granted or via the wildcard user unless

Convert an openssl private key to a KMIP private Key (`Object::PrivateKey`) of the given `KeyFormatType`

Parse the `uid` into a `(slot_id, key_id)` pair, stripping the given prefix.

Start a server from a pre-loaded (and optionally patched) [`ClapConfig`].

Returns the currently registered backend. Returns [`ModuleError::UserNotLoggedIn`] when no backend is registered (i.e. before `C_GetFunctionList` or a

Benchmark a single KMIP operation under a parameterized [`BenchmarkId`].

Create a fresh AES-256 symmetric key; return its KID.

Encrypts a file using the given symmetric key and access policy.

Generates a symmetric key

Unwrap the object (if need be) and return the unwrapped object. The unwrapped object is cached in memory. # Arguments `uid` - The unique identifier of

Check that `flag` bit is set in object's `CryptographicUsageMask`. If FIPS mode is disabled, check if the Unrestricted bit is set too. Return `true`

Convert an openssl public key to a KMIP public Key (`Object::PublicKey`) of the given `KeyFormatType`

--------------------------------------------------------------------------- Helper: POST raw bytes to the binary KMIP endpoint. Returns the HTTP stat

Create a symmetric key via the CLI

Set a new object, clearing the cached unwrapped version if any

Unwrap a key block with a wrapping key # Arguments `object_key_block` - the key block of the object to unwrap `unwrapping_key` - the unwrapping key #

Activate `key_id` via KMIP 1.4.

Adds noise generated from a chosen distribution to the input data. # Arguments `data` - A single float value to which noise will be added. # Return

Adds noise generated from a chosen distribution to the input data. # Arguments `data` - A single int value to which noise will be added. # Returns

Build a `Create` request for a `CoverCrypt` USK

Copy the wrapping key link from this object to `new_attrs`. If this object was wrapped, its wrapping key UID is preserved as a `LinkType::WrappingKey

Create an RSA key pair in the KMS with the given bit length and name tag, and return `(private_uuid, public_uuid)`. The private key is created with `

Decrypt a file using the given symmetric key

Delete a key via `DELETE /v1/crypto/keys/{kid}`.

This request is used to derive a Symmetric Key or Secret Data object from keys or Secret Data objects that are already known to the key management sys

Destroy a cryptographic object on the KMS # Arguments `kms_rest_client` - The KMS client `uid` - The object id `remove` - If the object should be remo

Destroy `key_id` for cleanup (key must already be `Deactivated` or `PreActive`).

Enforce that the caller has `Create` access-right. When `privileged_users` is configured, the user must either: - have been explicitly granted the `C