Yubico Forum

I am looking at the possibility of using YubiHSM to encrypt data on a server without having the ability for the same server to decrypt it - however I am having trouble getting past go with the python API.

I can connect to the HSM OK, generate keys and unlock them with no issues through a terminal. However when I attempt to unlock the keys using pyhsm I am told the master key which I use successfully through the terminal is too long.




I feel like I am missing something obvious....


Dom

Hey,

What you're missing is that you need to hex decode the password before you pass it to the unlock function. See https://github.com/Yubico/python-pyhsm/ ... unlock#L76 for an example of how this is done in the yhsm-keystore-unlock utility.

/klas

Thank you for the reply - will try shortly!


Dom