Yubico Forum
https://forum.yubico.com/

YubiHSM/PyHSM getting started question.....
https://forum.yubico.com/viewtopic.php?f=22&t=2263
Page 1 of 1

Author:  domf [ Wed Mar 23, 2016 4:11 pm ]
Post subject:  YubiHSM/PyHSM getting started question.....

I am looking at the possibility of using YubiHSM to encrypt data on a server without having the ability for the same server to decrypt it - however I am having trouble getting past go with the python API.

I can connect to the HSM OK, generate keys and unlock them with no issues through a terminal. However when I attempt to unlock the keys using pyhsm I am told the master key which I use successfully through the terminal is too long.

Attachment:
Screen Shot 2016-03-23 at 15.07.47.png
Screen Shot 2016-03-23 at 15.07.47.png [ 157.18 KiB | Viewed 2230 times ]



I feel like I am missing something obvious....


Dom

Author:  Klas [ Thu Mar 24, 2016 8:37 am ]
Post subject:  Re: YubiHSM/PyHSM getting started question.....

Hey,

What you're missing is that you need to hex decode the password before you pass it to the unlock function. See https://github.com/Yubico/python-pyhsm/ ... unlock#L76 for an example of how this is done in the yhsm-keystore-unlock utility.

/klas

Author:  domf [ Thu Mar 24, 2016 8:47 am ]
Post subject:  Re: YubiHSM/PyHSM getting started question.....

Thank you for the reply - will try shortly!


Dom

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/