在曲线secp256r1上使用PKCS#11生成密钥对并使用它签名

Question

我正在尝试用PKCS#11在SoftHSM2和github.com/miekg/pkcs11上生成一个EC-Keypair

我从这里得到了曲线参数：

https://github.com/ANSSI-FR/libecc/blob/master/src/curves/known/ec_params_secp256r1.h

但是我还是得到了CKR_GENERAL_ERROR，下面是我要签名的函数：

func sign() {
  lib := "/usr/lib/softhsm/libsofthsm2.so"
  p := pkcs11.New(lib)
  if p == nil {
    fmt.Printf("Lib not found ", lib)
    return
  }

  p.Initialize()
  defer p.Destroy()
  defer p.Finalize()
  slots, _ := p.GetSlotList(true)
  session, _ := p.OpenSession(slots[0], pkcs11.CKF_SERIAL_SESSION|pkcs11.CKF_RW_SESSION)
  defer p.CloseSession(session)
  p.Login(session, pkcs11.CKU_USER, "xxx")
  defer p.Logout(session)

  //    pkcs11.CKK_ECDSA                            = 0x00000003
    // pkcs11.CKK_EC                               = 0x00000003
    // pkcs11.CKK_X9_42_DH                         = 0x00000004
  // pkcs11.CKK_SEED                             = 0x0000002F
  //    pkcs11.CKC_X_509                            = 0x00000000

  //pkcs11.CKA_OBJECT_ID                        = 0x00000012
  //pkcs11.CKA_NEVER_EXTRACTABLE                = 0x00000164
  //    CKA_EC_PARAMS                        = 0x00000180
  //    CKA_EC_POINT                         = 0x00000181
  publicKeyTemplate := []*pkcs11.Attribute{
  pkcs11.NewAttribute(pkcs11.CKA_CLASS, pkcs11.CKO_PUBLIC_KEY),
  pkcs11.NewAttribute(pkcs11.CKA_KEY_TYPE, pkcs11.CKK_EC),
  //pkcs11.NewAttribute(pkcs11.CKA_OBJECT_ID, 1),
  pkcs11.NewAttribute(pkcs11.CKA_EC_PARAMS, []byte{
    0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xBC, 0xE6, 0xFA, 0xAD, 0xA7, 0x17, 0x9E, 0x84,
    0xF3, 0xB9, 0xCA, 0xC2, 0xFC, 0x63, 0x25, 0x51}),//[]byte{0x06, 0x09, 0x2B, 0x06, 0x01, 0x04, 0x01, 0xDA, 0x47, 0x0F, 0x01}),
  //pkcs11.NewAttribute(pkcs11.CKA_EC_POINT, 3),
  //pkcs11.NewAttribute(pkcs11.CKA_EXTRACTABLE, true),
  pkcs11.NewAttribute(pkcs11.CKA_TOKEN, true),
  //pkcs11.NewAttribute(pkcs11.CKA_ENCRYPT, true),
  //pkcs11.NewAttribute(pkcs11.CKA_PUBLIC_EXPONENT, []byte{3}),
  //pkcs11.NewAttribute(pkcs11.CKA_MODULUS_BITS, 1024),
  //pkcs11.NewAttribute(pkcs11.CKA_LABEL, "Null"),
  }
  privateKeyTemplate := []*pkcs11.Attribute{
  pkcs11.NewAttribute(pkcs11.CKA_CLASS, pkcs11.CKO_PRIVATE_KEY),
  pkcs11.NewAttribute(pkcs11.CKA_KEY_TYPE, pkcs11.CKK_EC),
  //pkcs11.NewAttribute(pkcs11.CKA_OBJECT_ID, 2),
  pkcs11.NewAttribute(pkcs11.CKA_EC_PARAMS, []byte{
    0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xBC, 0xE6, 0xFA, 0xAD, 0xA7, 0x17, 0x9E, 0x84,
    0xF3, 0xB9, 0xCA, 0xC2, 0xFC, 0x63, 0x25, 0x51}),
  //pkcs11.NewAttribute(pkcs11.CKA_EC_POINT, 3),
  //pkcs11.NewAttribute(pkcs11.CKA_NEVER_EXTRACTABLE, true),
  pkcs11.NewAttribute(pkcs11.CKA_TOKEN, true),
  pkcs11.NewAttribute(pkcs11.CKA_PRIVATE, true),
  pkcs11.NewAttribute(pkcs11.CKA_SIGN, true),
  pkcs11.NewAttribute(pkcs11.CKA_ENCRYPT, true),
  //pkcs11.NewAttribute(pkcs11.CKA_LABEL, "Null"),
  }
  _, priv, err := p.GenerateKeyPair(session,
  []*pkcs11.Mechanism{pkcs11.NewMechanism(pkcs11.CKM_EC_KEY_PAIR_GEN, nil)}, //pkcs11.CKM_EC_KEY_PAIR_GEN
  publicKeyTemplate, privateKeyTemplate)
  if err != nil {
    panic(err)
  }
  p.SignInit(session, []*pkcs11.Mechanism{pkcs11.NewMechanism(pkcs11.CKM_ECDSA_SHA1, nil)}, priv)
  // Sign something with the private key.
  data := []byte("Lets sign this data")

  _, err = p.Sign(session, data)
  if err != nil {
    panic(err)
  }

  fmt.Printf("It works!")
}

Answer 1

虽然我同意这个代码样本缺乏质量，更多的信息将是有帮助的，但主要看起来模板是错误的：

Mechanism CKM_EC_KEY_PAIR_GEN只需要公钥模板中CKA_EC_PARAMS中的曲线OID (注释部分是正确的，实际代码是错误的)。自动为两个密钥设置CKA_CLASS和CKA_KEY_TYPE，以及为私钥设置CKA_EC_PARAMS (请参阅https://docs.oasis-open.org/pkcs11/pkcs11-curr/v3.0/os/pkcs11-curr-v3.0-os.html#_Toc30061186)。

您可以添加CKA_TOKEN、CKA_LABEL或CKA_ID (注意：CKA_OBJECT_ID仅为数据对象定义，不是键)。从这个开始，而不是更多。然后根据需要添加使用限制(CKA_SIGN等)。