cksigtest

cksigtest [options]
Do not use PKCS #11 to perform any task that requires an Administrator Card. Use the equivalent nShield utilities instead.

Test cryptographic performance of attached nCipher hardware using the nCipher PKCS #11 Library.

Option Description

Program options

-s, --sign

Test sign operation (default).

-v, --verify

Test verify operation.

-d, --decrypt

Test decrypt operation.

-e, --encrypt

Test encrypt operation (default for mechs that can’t sign).

Key options

-S, --key-type=TYPE

Select key type to use - RSA (default), DSA, KCDSA, EC, ECDSA, EDDSA, MLDSA or SLHDSA.

-l, --key-size=BITS

Sets the key size for RSA (default 2048).

-M, --mech=MECH

Use mechanism MECH (RSA_PKCS_PSS, RSA_PKCS, RSA_PKCS_OAEP, RSA_X_509, SHA256_RSA_PKCS, DSA, DSA_SHA1, KCDSA_HAS160, EC_SHA256, ECDSA, EDDSA, ML_DSA, HASH_ML_DSA_SHA256, HASH_ML_DSA_SHA512, HASH_ML_DSA_SHAKE128, HASH_ML_DSA_SHAKE256, HASH_ML_DSA, SLH_DSA, HASH_SLH_DSA_SHA256, HASH_SLH_DSA_SHA512, HASH_SLH_DSA_SHAKE128, HASH_SLH_DSA_SHAKE256, HASH_SLH_DSA)
Default for sign / verify: RSA_PKCS_PSS.
Default for encrypt / decrypt: RSA_PKCS_OAEP.

--eddsa-mode=EDDSA_MODE

Choose mode for EDDSA. Valid values are: pure or prehash (default).

PQC parameters

-P, --parameter-set=PARAMETER-SET

Set CKA_PARAMETER_SET. Valid values are:

  • CKP_ML_DSA_44 (default)

  • CKP_ML_DSA_65

  • CKP_ML_DSA_87

  • CKP_SLH_DSA_SHA2_128S

  • CKP_SLH_DSA_SHA2_128F

  • CKP_SLH_DSA_SHA2_192S

  • CKP_SLH_DSA_SHA2_192F

  • CKP_SLH_DSA_SHA2_256S

  • CKP_SLH_DSA_SHA2_256F

  • CKP_SLH_DSA_SHAKE_128S

  • CKP_SLH_DSA_SHAKE_128F

  • CKP_SLH_DSA_SHAKE_192S

  • CKP_SLH_DSA_SHAKE_192F

  • CKP_SLH_DSA_SHAKE_256S

  • CKP_SLH_DSA_SHAKE_256F

--context-string=CONTEXT-STRING

Set CONTEXT-STRING (default is empty string).

Hedge variant selection (default hedge-preferred)

  • --hedge-preferred

  • --hedge-required

  • --deterministic-required

  • CKH_HEDGE_PREFERRED

  • CKH_HEDGE_REQUIRED

  • CKH_DETERMINISTIC_REQUIRED

Other options

-c, --cardset=NAME

Name of cardset to use

-j, --threads=COUNT

Set the max no. threads (default = 30).

-B, --unbuffered-stdout

Always flush stdout.

-t, --stop-after=TIME

Set maximum time to run (default is 60 seconds).

-p, --pin-for-testing=PIN

Use PIN for C_Login

Exposes PIN, use for testing only.

-n, --nopin

Don’t call C_Login, Object will be public object.

--sessionkeys

Generate session keys instead of token keys.

Help options

-h, --help

Display help for cksigtest.

-V, --version

Display the version number of cksigtest.

-u, --usage

Display a brief usage summary for cksigtest.