Nitrokey HSM 2, encrypt with AES

You need to use the sc-hsm-pkcs11 module from the sc-hsm-embedded project. OpenSC does not yet include support for AES keys on a SmartCard-HSM.

See testAES for details on how AES keys can be used via the PKCS#11 interface.

If you download the starterkit, then you find in sc-hsm-workspace-20200310.zip a workspace for the Smart Card Shell. The aes-performance.js and importAES.js scripts in examples/ show how AES operations can be performed.