Struct Pkcs11MockProvider 

pub struct Pkcs11MockProvider { /* private fields */ }

Mock PKCS#11 provider for testing.

This is a software implementation that mimics PKCS#11 behavior without requiring actual HSM hardware. It’s suitable for:

• Unit testing
• Integration testing
• Development environments
• CI/CD pipelines

Security Note

This mock provider stores keys in memory and should NOT be used in production. For production deployments, use a real PKCS#11 provider with hardware HSMs.

Implementations

impl Pkcs11MockProvider

pub fn new() -> Self

Create a new mock provider.

pub fn with_slot(slot_id: u64) -> Self

Create a new mock provider with specific slot ID.

pub fn initialize(&mut self) -> HsmResult<()>

Initialize the provider.

pub fn finalize(&mut self) -> HsmResult<()>

Finalize the provider.

pub fn open_session( &self, read_write: bool, pin: Option<&str>, ) -> HsmResult<u64>

Open a new session.

pub fn close_session(&self) -> HsmResult<()>

Close the current session.

Trait Implementations

impl Clone for Pkcs11MockProvider

fn clone(&self) -> Pkcs11MockProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for Pkcs11MockProvider

fn default() -> Self

Returns the “default value” for a type.

impl SigningProvider for Pkcs11MockProvider

fn name(&self) -> &str

Get the provider name.

fn is_available(&self) -> bool

Check if the provider is available and initialized.

fn generate_key(&self, label: &str) -> HsmResult<KeyId>

Generate a new key pair and return its identifier.

fn import_key(&self, label: &str, secret_key: &SecretKey) -> HsmResult<KeyId>

Import an existing secret key.

fn get_public_key(&self, key_id: &KeyId) -> HsmResult<PublicKey>

Get the public key for a key identifier.

fn sign(&self, key_id: &KeyId, message: &[u8]) -> HsmResult<SignatureBytes>

Sign a message using the specified key.

fn list_keys(&self) -> HsmResult<Vec<KeyMetadata>>

List all key identifiers.

fn delete_key(&self, key_id: &KeyId) -> HsmResult<()>

Delete a key.

fn key_exists(&self, key_id: &KeyId) -> bool

Check if a key exists.

fn health_check(&self) -> HsmResult<HealthStatus>

Perform health check and return status.

fn get_audit_log(&self, limit: usize) -> HsmResult<Vec<AuditEntry>>

Get audit log entries (if supported).

fn verify( &self, public_key: &PublicKey, message: &[u8], signature: &SignatureBytes, ) -> HsmResult<()>

Verify a signature (can use public key directly).

fn export_key(&self, key_id: &KeyId) -> HsmResult<SecretKey>

Export secret key (if allowed by key policy).

fn get_key_metadata(&self, key_id: &KeyId) -> HsmResult<KeyMetadata>

Get key metadata including lifecycle state and usage stats.

fn update_key_state( &self, key_id: &KeyId, state: KeyLifecycleState, ) -> HsmResult<()>

Update key lifecycle state.

fn batch_sign( &self, key_id: &KeyId, messages: &[&[u8]], ) -> HsmResult<Vec<SignatureBytes>>

Batch sign multiple messages.

fn rotate_key(&self, key_id: &KeyId, new_label: &str) -> HsmResult<KeyId>

Rotate a key (generate new version while archiving old one).