Skill

performing-hardware-security-module-integration

From asi

Integrates Hardware Security Modules (HSMs) via PKCS#11 for cryptographic key management, signing, encryption, and secure storage using python-pkcs11, AWS CloudHSM, and YubiHSM2. For security audits, testing, and compliance validation.

Python

AWS

security

npx claudepluginhub plurigrid/asi --plugin asi

Tool Access

This skill uses the workspace's default tool permissions.

Preview

Hardware Security Modules (HSMs) provide tamper-resistant cryptographic key storage and operations. This skill covers integrating with HSMs via the PKCS#11 standard interface using python-pkcs11, performing key generation, signing, encryption, and verification operations, querying token and slot information, and validating HSM configuration for compliance with FIPS 140-2/3 requirements.

SKILL.md

Similar Skills

performing-hardware-security-module-integration

5.9k

Integrates HSMs via PKCS#11 for key management, signing, encryption, verification, and FIPS compliance using python-pkcs11, AWS CloudHSM, YubiHSM2. For security audits and testing.

3 files

cybersecurity-skills

performing-hardware-security-module-integration

Integrates HSMs via PKCS#11 using python-pkcs11, AWS CloudHSM, and YubiHSM2 for key generation, signing, verification, object listing, mechanism queries, and FIPS compliance reports.

3 files

cybersecurity-skills-zh

configuring-hsm-for-key-storage

Configures HSMs via PKCS#11 for secure key storage, generation, management, and crypto operations like signing/encryption. Covers SoftHSM2 dev setup and AWS/Azure CloudHSM.

asi

Stats

Parent Repo Stars16

Parent Repo Forks5

Last CommitApr 4, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

Performing Hardware Security Module Integration

Overview

When to Use

When conducting security assessments that involve performing hardware security module integration

When following incident response procedures for related security events

When performing scheduled security testing or auditing activities

When validating security controls through hands-on testing

Prerequisites

HSM device or software HSM (SoftHSM2 for testing)

PKCS#11 shared library (.so/.dll) for the HSM vendor

Python 3.9+ with python-pkcs11

Token initialized with SO PIN and user PIN

For AWS CloudHSM: cloudhsm-pkcs11 provider configured

Steps

Load PKCS#11 library and enumerate available slots and tokens

Open session and authenticate with user PIN

Generate RSA 2048-bit or EC P-256 key pairs on the HSM

Perform signing and verification using on-device keys

List all objects (keys, certificates) stored on the token

Query mechanism list to verify supported algorithms

Generate compliance report with key inventory and algorithm audit

Expected Output

JSON report listing HSM slots, tokens, stored keys, supported mechanisms, and compliance status

Signing test results with key metadata and algorithm details