C# application to communicate with Safe Net HSM device

AKHIL LAL C V

Hi,

I need to create an application in c# which will communicate with SafeNet's HSM Device. Since i need to follow PKCS#11 Standards.So programming in c# with vendor provided SDK is little bit difficult. So I found an API called NCryptoki . Using their GUI interface to create keys , slots etc. i just created a key pair(Public & Private). then exported the Public key to a file.

So my application would be an intermediate application between other application and the HSM device. We will share the public keys (file which i exported) to the client. So when an a client request to connect with the HSM device. They would send this key file along with the request.

Now i need to validate this key by checking any particular token holds this public key. When i read that file from code it is in encrypted format. I don't have any idea how to decrypt that. I got stuck in this step. So please any one help me out to do this.

I am just a beginer in this Section (cryptography,certificates, keys etc.) so please replay me if i am in a wrong way.

Thanks & Regarads Akhil lal

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Lokendra Mishra8y ago
i hope its too late to reply on this post, but i have an idea for your query.
first step: you need to interact with the HSM through cryptoki.dll

// initializes the connection to the HSM
int Safenet::Initialize(const char* szSlotName, const char* szPassword)
{
CK_RV rv = CKR_OK;
if (m_hSession != CK_INVALID_HANDLE)
{
C_CloseSession(m_hSession);
rv = C_Finalize(NULL);
m_hSession = CK_INVALID_HANDLE;
}
rv = CKR_OK;
rv = C_Initialize(NULL);// method initailaizes the HSM
if(rv != CKR_OK && rv != CKR_CRYPTOKI_ALREADY_INITIALIZED)
return 1;
int nSlotID = atoi(szSlotName);
/* Obtain a session so we can perform cryptoki operations */
rv = C_OpenSession(nSlotID, CKF_RW_SESSION|CKS_RO_USER_FUNCTIONS, NULL, NULL, &m_hSession);
if(rv!= CKR_OK)
return 2;
rv = C_Login(m_hSession, CKU_USER, (CK_CHAR_PTR)szPassword, strlen(szPassword));
if(rv!= CKR_OK && rv!=CKR_USER_ALREADY_LOGGED_IN)
return rv;
if(rv==CKR_OK)
return 0;
return rv;
}
Erick M8y ago
Hi Akhil, can you finished this component ?
now i have the same situation.

Help please