# An attempt at a Python interface to PKCS 11 using the scary ctypes # module from the Python standard library. from ctypes import * from .exceptions import * from .types import * from .constants import * from .attributes import * from .prototypes import * class PKCS11 (object): def __init__(self, so_name = "libpkcs11.so"): self.so_name = so_name self.so = CDLL(so_name) def raise_on_failure(rv): if rv != CKR_OK: raise CKR_Exception.ckr_map[rv] for name, args in Prototypes.iteritems(): func = getattr(self.so, name) func.restype = raise_on_failure func.argtypes = args self.adb = AttributeDB() def __getattr__(self, name): return getattr(self.so, name) def C_GetFunctionList(self): return self @property def version(self): info = CK_INFO() self.so.C_GetInfo(byref(info)) return info.cryptokiVersion def C_Initialize(self): self.so.C_Initialize(None) def C_Finalize(self): self.so.C_Finalize(None) def C_GetSlotList(self): slots = (CK_SLOT_ID * 10)() count = CK_ULONG(len(slots)) self.so.C_GetSlotList(CK_TRUE, slots, byref(count)) return [slots[i] for i in xrange(count.value)] def C_GetTokenInfo(self, slot_id): token_info = CK_TOKEN_INFO() self.so.C_GetTokenInfo(slot_id, byref(token_info)) return token_info def C_OpenSession(self, slot, flags = CKF_SERIAL_SESSION | CKF_RW_SESSION, application = None, notify = CK_NOTIFY()): handle = CK_SESSION_HANDLE() self.so.C_OpenSession(slot, flags, application, notify, byref(handle)) return handle.value def C_GenerateRandom(self, session, n): buffer = create_string_buffer(n) self.so.C_GenerateRandom(session, buffer, sizeof(buffer)) return buffer.raw def C_Login(self, session, user, pin): self.so.C_Login(session, user, pin, len(pin)) def C_GetAttributeValue(self, session_handle, object_handle, attributes): template = self.adb.getvalue_create_template(attributes) self.so.C_GetAttributeValue(session_handle, object_handle, template, len(template)) self.adb.getvalue_allocate_template(template) self.so.C_GetAttributeValue(session_handle, object_handle, template, len(template)) return self.adb.from_ctypes(template) def C_FindObjectsInit(self, session, template): if template: self.so.C_FindObjectsInit(session, self.adb.to_ctypes(template), len(template)) else: self.so.C_FindObjectsInit(session, None, 0) def C_FindObjects(self, session, chunk_size = 10): objects = (CK_OBJECT_HANDLE * chunk_size)() count = CK_ULONG(1) while count.value > 0: self.so.C_FindObjects(session, objects, len(objects), byref(count)) for i in xrange(count.value): yield objects[i] def C_GenerateKeyPair(self, session, mechanism_type, public_template, private_template): mechanism = CK_MECHANISM(mechanism_type, None, 0) public_template = self.adb.to_ctypes(public_template) private_template = self.adb.to_ctypes(private_template) public_handle = CK_OBJECT_HANDLE() private_handle = CK_OBJECT_HANDLE() self.so.C_GenerateKeyPair(session, byref(mechanism), public_template, len(public_template), private_template, len(private_template), byref(public_handle), byref(private_handle)) return public_handle.value, private_handle.value __all__ = ["PKCS11"] __all__.extend(name for name in globals() if name.startswith("CK") or name.startswith("CRYPTOKI_"))