Return the key material of a symmetric key, raw or transparent. The PKCS#1 of an RSA Key, etc.

Returns the `Attributes` of that object if any, an error otherwise

Get the user from the request depending on the authentication method.

Build a `CreateKeyPairRequest` for an elliptic curve

This operation requests the server to generate a new public/private key pair and register the two corresponding new Managed Cryptographic Object The r

This operation requests that the server returns the Managed Object specified by its Unique Identifier. Only a single object is returned. The response

Run a ckms command expecting failure, return the stderr message.

Extract the `key_uid` (prefixed by a pattern) from a text

Returns the `KeyBlock` of that object if any, an error otherwise

Spin up a fresh, empty in-process KMS instance with an `SQLite` backend. No network access is required.

Open a new session with the HSM slot. The session can be read-only or read-write, depending on the `read_write` parameter. # Arguments `read_write` -

Set the tags on the attributes

Returns the current UTC time with milliseconds set to zero. This function is used to normalize timestamps across the KMIP implementation, ensuring co

Remove all object handles from the cache.

Insert or update a cached object.

Assert common certificate properties: subject CN, issuer CN, validity, and serial number ≤ 20 bytes.

Retrieve DER bytes of a certificate object.

This request is used to generate a Certificate object for a public key. This request supports the certification of a new public key, as well as the ce

Retrieve a single object for a given operation type or the Get operation if not found. When tags are provided, the function will return the first obj

Set a link to an object. If a link of the same type already exists, it is removed. There can only be one link of a given type.

Create a `PreActive` symmetric key owned by `owner` and return its UID.

Execute the operation once, returning `true` on success. For `PreSerialized` ops the request bytes are sent without any serialization, and the respon

Grant the ability to `user` to perform the KMIP `operations` on the object identified by its `uid`

Split `key_uid` into `total_parts` XOR shares; return share UIDs.

Get an object If the request contains a `KeyWrappingData`, the key will be wrapped. If the request contains a `KeyWrapType`, the key will be unwrappe

Build an ` Import ` request for a generic Object

Issue a PQC certificate via the KMIP `Certify` operation. When `issuer_cert_id` and `issuer_sk_id` are `None` the certificate is self-signed (root CA

This operation requests the server to perform an encryption operation on the provided data using a Managed Cryptographic Object as the key for the enc

Convert a KMIP Private key to openssl `PKey<Private>` The supported `KeyFormatType` are: PKCS1 `ECPrivateKey` (SEC1) PKCS8 (not encrypted only) `Tran

Post-serialization normalization pass. See prior implementation notes in serializer.

Validate a chain expressed as a slice of cert IDs. Asserts `Valid`.

Record a benchmark name as skipped/unsupported (for compact output).

Build a `KMS` configured for ceremony mode with the given CO users.

This operation requests the server to perform a decryption operation on the provided data using a Managed Cryptographic Object as the key for the decr

This operation requests the server to perform an encryption operation on the provided data using a Managed Cryptographic Object as the key for the enc

This operation requests the server to Import a Managed Object specified by its Unique Identifier. The request specifies the object being imported and

Read an object from a KMIP JSON TTLV file # Errors If the file cannot be opened or read, an error is returned.

Returns a reader connection using round-robin distribution.

Execute an async operation and, when a recorder is configured, measure its wall-clock duration and outcome (`"success"` / `"error"`). When no recorde

TLS + certificate authentication. Configuration is loaded from `test_data/configs/server/auth/cert.toml`.

Return the response body as a UTF-8 string. # Errors Returns an error if the body is not valid UTF-8.

Build a `CreateKeyPairRequest` for a RSA key pair.

Build an Encryption Request to encrypt the provided `plaintext`. The cryptographic scheme is determined by that of the key identified by `key_unique_

Returns the `Attributes` of that object if any, an error otherwise

Fetch the element that will be deserialized next Updates the `at_root` status if the deserializer is at the root