hc123
November 5, 2025, 9:55pm
1
Signing any pre-padded and prefixed hash with the RSA-X-509 mechanism is taking around 10 times longer than the CardLogix USB HSM. Is this a known issue with nitrokey HSM?
Maybe it’s rather an ignored issue, if one takes a look at the following thread?
I’ve looked for duplicates but can’t find any. I’ve got a nice new Nitrokey HSM2. I’ve generated the relevant keys on it.
However, every action I take with it is very very slow - i’m talking 1 minute + to do almost any action. For example, this is a signing action using openssl:
Engine “pkcs11” set.openssl dgst -sha384 -engine pkcs11 -keyform engine -sign > /dev/null 0.02s user 0.02s system 0% cpu 1:08.23 total
I assume something’s going wrong, but don’t know exactly where to look. I’m usin…
