Nitrokey HSM 2: Encrypt data using AES-CBC

Nitrokeys HSM
1

Hi,
I am trying to encrypt data using AES-CBC. As pointed out in this comment, I need to use sc-hsm-pkcs11 module to do this. However, it will fail to find a slot with an available token when using libsc-hsm-pkcs11.so module.

As shown in the picture below, no slot with a token was found(using libsc-hsm-pkcs11.so), while there is one slot with a present token using opensc-pkcs11.so.

libsc-hsm-pkcs11-issue
libsc-hsm-pkcs11-issue725×199 8.7 KB

The sc-hsm-embedded module installed in my machine is built from source (v2.12).

Could someone help me to get sc-hsm-pkcs11 work with Nitrokey HSM 2?

2

In principle, this should work, here is on my FreeBSD:

> pkcs11-tool --show-info --module /usr/local/lib/libsc-hsm-pkcs11.so
Cryptoki version 2.20
Manufacturer     CardContact (www.cardcontact.de)
Library          SmartCard-HSM via PC/SC (ver 2.11)
Using slot 1 with a present token (0x5)

(or after update)

> pkcs11-tool --show-info --module ./src/pkcs11/.libs/libsc-hsm-pkcs11.so
Cryptoki version 2.20
Manufacturer     CardContact (www.cardcontact.de)
Library          SmartCard-HSM via PC/SC (ver 2.12)
Using slot 1 with a present token (0x5)

What does pkcs11-tool --module /usr/lib/opensc-pkcs11.so -T say?