YubiHSM Shell batch mode - Opaque data

yubihsm_notes.md

• Total objects that can be stored = 256
• Object ID (in hex) between 0000 and ffff

Add new authentication key (id: 3) for opaque data management

> ./yubihsm-shell --connector=http://localhost:12345 --authkey=1 \
--action=put-authentication-key --new-password=password3 --object-id=3 --domains=1,2,3 \
--capabilities=get-opaque,put-opaque,delete-opaque,export-wrapped,get-pseudo-random,put-wrap-key,import-wrapped \
--delegated=exportable-under-wrap,export-wrapped,import-wrapped

Put Opaque Data (using auth key id 3, opaque object id 15)

> ./yubihsm-shell --connector=http://localhost:12345 --authkey=3 --action=put-opaque \
--object-id=15 --label="bls_key_4" --domains=1,2,3 \
--algorithm=opaque-data --capabilities=none \
--informat=hex --in=5e8d5667ce78982a07242739ab03dc63c91e830c80a5b6adca777e3f216a405d
Enter password:
Created session 1
Stored Opaque object 0x000f

Get Opaque Data command:

> ./yubihsm-shell --connector=http://localhost:12345 --authkey=1 --action=get-opaque --object-id=15 --outformat=hex
Session keepalive set up to run every 15 seconds
Enter password:
Created session 0
5e8d5667ce78982a07242739ab03dc63c91e830c80a5b6adca777e3f216a405d