Cryptoki Rust Wrapper

This is the low-level wrapper crate for PKCS #11 exposing the bindgen types.

Generating bindings

The FFI bindings presented by this crate can be either those committed in the crate under src/bindings or generated on the fly from the pkcs11.h file at build time. For generating the bindings at build time please enable the generate-bindings feature, as it is not enabled by default.

NOTE: Only a limited set of bindings are committed and their target triplet is included in the name of the file - if the triplet you require is not available, feel free to raise a Pull Request to add it or to use build-time generation of bindings. All the committed bindings MUST be generated from the library version found under the vendor submodule.

Generate bindings in container

To simplify generating bindings, we provide a simple container that ca be executed regardless of the operating system in use from the cryptoki-sys directory.

To generate the bindings in container, just build the container from the Containerfile in this directory:

$ podman build -t rust-cryptoki .

And then run it with the current working directory mounted in the container:

$ podman run -v $PWD:/src:z rust-cryptoki

It will download all the rust dependencies and regenerate all the binding tiplets.

Copyright 2021 Contributors to the Parsec project.