← All tools
Public-key
A PKCS#11 session, using real keys
Walk through an actual Cryptoki call sequence — login, generate a key pair, sign, and attempt to wrap a non-extractable private key — with real Web Crypto operations standing in for the hardware token.
What's happening under the hood →·Read the RSA & public-key cryptography module for the full explanation →·See the PKCS#11: the standard behind every HSM and smart card use case →
1. C_OpenSession + C_Login
Every Cryptoki interaction starts by opening a session, then authenticating it.
Session state: closed