swarmauri_crypto_nacl_pkcs11 0.3.0.dev3

NaCl + PKCS#11 crypto provider for Swarmauri

---

Swarmauri Crypto NaCl PKCS#11

Hybrid crypto provider using PyNaCl for Ed25519/X25519 operations and python-pkcs11 for AES-KW key wrapping. Implements the ICrypto contract via CryptoBase.

• AES-GCM symmetric encrypt/decrypt
• AES-KW wrap/unwrap using PKCS#11
• X25519 sealed boxes for single and multi-recipient encryption

Installation

pip install swarmauri_crypto_nacl_pkcs11

Usage

from swarmauri_crypto_nacl_pkcs11 import NaClPkcs11Crypto
from swarmauri_core.crypto.types import KeyRef, KeyType, KeyUse, ExportPolicy

crypto = NaClPkcs11Crypto()

sym = KeyRef(
    kid="sym1",
    version=1,
    type=KeyType.SYMMETRIC,
    uses=(KeyUse.ENCRYPT, KeyUse.DECRYPT),
    export_policy=ExportPolicy.SECRET_WHEN_ALLOWED,
    material=b"\x00" * 32,
)

ct = await crypto.encrypt(sym, b"hello")
pt = await crypto.decrypt(sym, ct)

Entry point

The provider is registered under the swarmauri.cryptos entry-point as NaClPkcs11Crypto.