Extract the raw bytes from the EC key material. These bytes are the same as the ones in openssl rwa bytes

Encrypts a file using the given public key and access policy.

Helper: encrypt data using a key. Returns the full ciphertext as `iv || ciphertext || tag` — the format expected by the decrypt oracle in `decrypt_us

Resolve the database URL from the command-line option or an environment variable, returning the raw string. This avoids `Url::parse()` which cannot h

This operation requests that the server returns a Managed Object specified by its Unique Identifier, together with its attributes. The Key Format Type

Retrieve the list of supported cryptographic algorithms for a given HSM slot. This function queries the specified slot to determine which algorithms

Get a reference to the underlying `HsmLib` for direct PKCS#11 function calls.

Test if an object identified by its `uid` is currently owned by `owner`

This operation requests that the server search for one or more Managed Objects, depending on the attributes specified in the request. All attributes a

Fetch a JWKS from the provided URI and parse it. This function will log errors for invalid JWKs but it will not stop the process if one fails. It ret

Try to parse an identifier as a keyset reference. A keyset reference is recognized when: - It is NOT a tag JSON (`[...]`) - It is NOT an HSM prefix (

Generate a random key using a cryptographically secure random number generator that is suitable for use with FPE

Remove the link from the attributes

Retrieve the tags of the object with the given `uid`

Rotate all keys that are past their scheduled rotation time. Queries the database for Active keys whose `rotate_interval` has elapsed since their las

This operation requests the server to perform a signature operation on the provided data using a Managed Cryptographic Object as the key for the signa

Unwrap an Object This function is used to unwrap an object # Arguments `object` - the object to unwrap `kms` - the KMS `user` - the user accessing th

Update the state of an object in the database.

Writes a KMIP Object to a JSON TTLV in a file. # Errors If the file cannot be opened or written, an error is returned.

Apply the client's default headers to a request builder.

Helper: test that a KEM/hybrid algorithm cert creation fails with unsupported format error.

Helper: encode bytes as base64url without padding.

Build a `JwksManager` pre-loaded with a single RSA public key (no HTTP fetch).

Helper: create a keypair, then certify the public key with a subject name.

Helper: create a certificate (self-signed or CA-signed), then re-certify it.

Key Wrap using `CKM_RSA_PKCS_OAEP` a.k.a PKCS #1 RSA OAEP as specified in PKCS#11 v2.40 available at <http://docs.oasis-open.org/pkcs11/pkcs11-curr/v

Compromise a key via KMIP `Revoke` with `KeyCompromise` reason.

Return the key material of a covercrypt key, raw or transparent.

Decrypts a wrapped key Tries to decrypt it, using the `resource_name` if present. If it fails, key might be wrapped without it, so we try to unwrap it

Compute the number of whole days until the next scheduled rotation for a key. Returns `None` if the rotation schedule cannot be determined (no interv

Deactivate a key via KMIP `Revoke` with `CessationOfOperation` reason.

Decode a json web token (JWT) used for Google CSE

Decrypt data using the specified key and algorithm

This operation is used to indicate to the server that the key material for the specified Managed Object SHALL be destroyed or rendered inaccessible. T

Encrypt data using the specified key and algorithm

Extract the private key from a test.

Extract the public key from a test.

Extract the imported key id

This function finalizes the login process. It returns the access token. This function should be called immediately after the user has been instructed

Return uid, state and attributes of the object identified by its owner, and possibly by its attributes and/or its `state`

Send an HTTP GET request. # Errors Returns an error if the request fails.

Get PKCS#11 info as Info struct. This method calls `C_GetInfo` and returns the `Info` structure with parsed library information.

This operation requests the server to perform a hash operation on the data provided. The request contains information about the cryptographic paramet