python-pkcs11 0.8.0__cp313-cp313-win_amd64.whl

pkcs11/__init__.py

@@ -0,0 +1,36 @@
+"""
+:mod:`pkcs11` defines a high-level, "Pythonic" interface to PKCS#11.
+"""
+
+from .constants import *  # noqa: F403
+from .exceptions import *  # noqa: F403
+from .mechanisms import *  # noqa: F403
+from .types import *  # noqa: F403
+from .util import dh, dsa, ec, rsa, x509  # noqa: F401
+
+_so = None
+_lib = None
+
+
+def lib(so):
+    """
+    Wrap the main library call coming from Cython with a preemptive
+    dynamic loading.
+    """
+    global _lib
+    global _so
+
+    if _lib:
+        if _so != so:
+            raise AlreadyInitialized(  # noqa: F405
+                "Already initialized with %s" % _so
+            )
+        else:
+            return _lib
+
+    from . import _pkcs11
+
+    _lib = _pkcs11.lib(so)
+    _so = so
+
+    return _lib

pkcs11/_pkcs11.pxd

@@ -0,0 +1,622 @@
+"""
+Definitions imported from PKCS11 C headers.
+"""
+
+from cython.view cimport array
+
+from defaults import *
+
+cdef extern from '../extern/cryptoki.h':
+
+    ctypedef unsigned char CK_BYTE
+    ctypedef CK_BYTE CK_BBOOL
+    ctypedef CK_BYTE CK_UTF8CHAR
+    ctypedef unsigned char CK_CHAR
+    ctypedef unsigned long int CK_ULONG
+    ctypedef CK_ULONG CK_ATTRIBUTE_TYPE
+    ctypedef CK_ULONG CK_EC_KDF_TYPE
+    ctypedef CK_ULONG CK_FLAGS
+    ctypedef CK_ULONG CK_MECHANISM_TYPE
+    ctypedef CK_ULONG CK_OBJECT_HANDLE
+    ctypedef CK_ULONG CK_RSA_PKCS_MGF_TYPE
+    ctypedef CK_ULONG CK_RSA_PKCS_OAEP_SOURCE_TYPE
+    ctypedef CK_ULONG CK_SESSION_HANDLE
+    ctypedef CK_ULONG CK_SLOT_ID
+    ctypedef CK_ULONG CK_STATE
+
+    ctypedef enum CK_RV:
+        CKR_OK,
+        CKR_CANCEL,
+        CKR_HOST_MEMORY,
+        CKR_SLOT_ID_INVALID,
+
+        CKR_GENERAL_ERROR,
+        CKR_FUNCTION_FAILED,
+
+        CKR_ARGUMENTS_BAD,
+        CKR_NO_EVENT,
+        CKR_NEED_TO_CREATE_THREADS,
+        CKR_CANT_LOCK,
+
+        CKR_ATTRIBUTE_READ_ONLY,
+        CKR_ATTRIBUTE_SENSITIVE,
+        CKR_ATTRIBUTE_TYPE_INVALID,
+        CKR_ATTRIBUTE_VALUE_INVALID,
+        CKR_DATA_INVALID,
+        CKR_DATA_LEN_RANGE,
+        CKR_DEVICE_ERROR,
+        CKR_DEVICE_MEMORY,
+        CKR_DEVICE_REMOVED,
+        CKR_ENCRYPTED_DATA_INVALID,
+        CKR_ENCRYPTED_DATA_LEN_RANGE,
+        CKR_FUNCTION_CANCELED,
+        CKR_FUNCTION_NOT_PARALLEL,
+
+        CKR_FUNCTION_NOT_SUPPORTED,
+
+        CKR_KEY_HANDLE_INVALID,
+
+        CKR_KEY_SIZE_RANGE,
+        CKR_KEY_TYPE_INCONSISTENT,
+
+        CKR_KEY_NOT_NEEDED,
+        CKR_KEY_CHANGED,
+        CKR_KEY_NEEDED,
+        CKR_KEY_INDIGESTIBLE,
+        CKR_KEY_FUNCTION_NOT_PERMITTED,
+        CKR_KEY_NOT_WRAPPABLE,
+        CKR_KEY_UNEXTRACTABLE,
+
+        CKR_MECHANISM_INVALID,
+        CKR_MECHANISM_PARAM_INVALID,
+
+        CKR_OBJECT_HANDLE_INVALID,
+        CKR_OPERATION_ACTIVE,
+        CKR_OPERATION_NOT_INITIALIZED,
+        CKR_PIN_INCORRECT,
+        CKR_PIN_INVALID,
+        CKR_PIN_LEN_RANGE,
+
+        CKR_PIN_EXPIRED,
+        CKR_PIN_LOCKED,
+
+        CKR_SESSION_CLOSED,
+        CKR_SESSION_COUNT,
+        CKR_SESSION_HANDLE_INVALID,
+        CKR_SESSION_PARALLEL_NOT_SUPPORTED,
+        CKR_SESSION_READ_ONLY,
+        CKR_SESSION_EXISTS,
+
+        CKR_SESSION_READ_ONLY_EXISTS,
+        CKR_SESSION_READ_WRITE_SO_EXISTS,
+
+        CKR_SIGNATURE_INVALID,
+        CKR_SIGNATURE_LEN_RANGE,
+        CKR_TEMPLATE_INCOMPLETE,
+        CKR_TEMPLATE_INCONSISTENT,
+        CKR_TOKEN_NOT_PRESENT,
+        CKR_TOKEN_NOT_RECOGNIZED,
+        CKR_TOKEN_WRITE_PROTECTED,
+        CKR_UNWRAPPING_KEY_HANDLE_INVALID,
+        CKR_UNWRAPPING_KEY_SIZE_RANGE,
+        CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT,
+        CKR_USER_ALREADY_LOGGED_IN,
+        CKR_USER_NOT_LOGGED_IN,
+        CKR_USER_PIN_NOT_INITIALIZED,
+        CKR_USER_TYPE_INVALID,
+
+        CKR_USER_ANOTHER_ALREADY_LOGGED_IN,
+        CKR_USER_TOO_MANY_TYPES,
+
+        CKR_WRAPPED_KEY_INVALID,
+        CKR_WRAPPED_KEY_LEN_RANGE,
+        CKR_WRAPPING_KEY_HANDLE_INVALID,
+        CKR_WRAPPING_KEY_SIZE_RANGE,
+        CKR_WRAPPING_KEY_TYPE_INCONSISTENT,
+        CKR_RANDOM_SEED_NOT_SUPPORTED,
+
+        CKR_RANDOM_NO_RNG,
+
+        CKR_DOMAIN_PARAMS_INVALID,
+
+        CKR_BUFFER_TOO_SMALL,
+        CKR_SAVED_STATE_INVALID,
+        CKR_INFORMATION_SENSITIVE,
+        CKR_STATE_UNSAVEABLE,
+
+        CKR_CRYPTOKI_NOT_INITIALIZED,
+        CKR_CRYPTOKI_ALREADY_INITIALIZED,
+        CKR_MUTEX_BAD,
+        CKR_MUTEX_NOT_LOCKED,
+
+        CKR_NEW_PIN_MODE,
+        CKR_NEXT_OTP,
+        CKR_EXCEEDED_MAX_ITERATIONS,
+        CKR_FIPS_SELF_TEST_FAILED,
+        CKR_LIBRARY_LOAD_FAILED,
+        CKR_PIN_TOO_WEAK,
+        CKR_PUBLIC_KEY_INVALID,
+
+        CKR_FUNCTION_REJECTED,
+
+        CKR_VENDOR_DEFINED,
+
+
+    ctypedef enum CK_USER_TYPE:
+        CKU_SO,
+        CKU_USER,
+        CKU_CONTEXT_SPECIFIC,
+
+    cdef enum:
+        CK_TRUE,
+        CK_FALSE,
+
+    cdef enum:
+        CK_UNAVAILABLE_INFORMATION,
+        CK_EFFECTIVELY_INFINITE,
+
+    cdef enum:  # CK_FLAGS
+        CKF_DONT_BLOCK,
+        CKF_RW_SESSION,
+        CKF_SERIAL_SESSION,
+
+    cdef enum:  # CKZ
+        CKZ_DATA_SPECIFIED,
+
+    cdef enum: # CK_STATE
+        CKS_RO_PUBLIC_SESSION,
+        CKS_RO_USER_FUNCTIONS,
+        CKS_RW_PUBLIC_SESSION,
+        CKS_RW_USER_FUNCTIONS,
+        CKS_RW_SO_FUNCTIONS
+
+    ctypedef struct CK_VERSION:
+        CK_BYTE major
+        CK_BYTE minor
+
+    ctypedef struct CK_INFO:
+        CK_VERSION cryptokiVersion;
+        CK_UTF8CHAR manufacturerID[32]
+        CK_FLAGS flags
+
+        CK_UTF8CHAR libraryDescription[32]
+        CK_VERSION libraryVersion;
+
+    ctypedef struct CK_SLOT_INFO:
+        CK_UTF8CHAR slotDescription[64]
+        CK_UTF8CHAR manufacturerID[32]
+        CK_FLAGS flags
+
+        CK_VERSION hardwareVersion
+        CK_VERSION firmwareVersion
+
+    ctypedef struct CK_MECHANISM_INFO:
+        CK_ULONG ulMinKeySize
+        CK_ULONG ulMaxKeySize
+        CK_FLAGS flags
+
+    ctypedef struct CK_TOKEN_INFO:
+        CK_UTF8CHAR label[32]
+        CK_UTF8CHAR manufacturerID[32]
+        CK_UTF8CHAR model[16]
+        CK_CHAR serialNumber[16]
+        CK_FLAGS flags
+
+        CK_ULONG ulMaxSessionCount
+        CK_ULONG ulSessionCount
+        CK_ULONG ulMaxRwSessionCount
+        CK_ULONG ulRwSessionCount
+        CK_ULONG ulMaxPinLen
+        CK_ULONG ulMinPinLen
+        CK_ULONG ulTotalPublicMemory
+        CK_ULONG ulFreePublicMemory
+        CK_ULONG ulTotalPrivateMemory
+        CK_ULONG ulFreePrivateMemory
+        CK_VERSION hardwareVersion
+        CK_VERSION firmwareVersion
+        CK_CHAR utcTime[16]
+
+    ctypedef struct CK_SESSION_INFO:
+        CK_SLOT_ID slotID
+        CK_STATE state
+        CK_FLAGS flags
+        CK_ULONG ulDeviceError
+
+    ctypedef struct CK_MECHANISM:
+        CK_MECHANISM_TYPE mechanism
+        void *pParameter
+        CK_ULONG ulParameterLen
+
+    ctypedef struct CK_ATTRIBUTE:
+        CK_ATTRIBUTE_TYPE type
+        void *pValue
+        CK_ULONG ulValueLen
+
+    ctypedef struct CK_RSA_PKCS_OAEP_PARAMS:
+        CK_MECHANISM_TYPE hashAlg
+        CK_RSA_PKCS_MGF_TYPE mgf
+        CK_RSA_PKCS_OAEP_SOURCE_TYPE source
+        void *pSourceData
+        CK_ULONG ulSourceDataLen
+
+    ctypedef struct CK_RSA_PKCS_PSS_PARAMS:
+        CK_MECHANISM_TYPE hashAlg
+        CK_RSA_PKCS_MGF_TYPE mgf
+        CK_ULONG sLen
+
+    ctypedef struct CK_ECDH1_DERIVE_PARAMS:
+        CK_EC_KDF_TYPE kdf
+        CK_ULONG ulSharedDataLen
+        CK_BYTE *pSharedData
+        CK_ULONG ulPublicDataLen
+        CK_BYTE *pPublicData
+
+    ctypedef struct CK_KEY_DERIVATION_STRING_DATA:
+        CK_BYTE *pData
+        CK_ULONG ulLen
+
+    ctypedef struct CK_AES_CBC_ENCRYPT_DATA_PARAMS:
+        CK_BYTE iv[16]
+        CK_BYTE *pData
+        CK_ULONG length
+
+    ctypedef struct CK_EDDSA_PARAMS:
+       CK_BBOOL phFlag
+       CK_ULONG ulContextDataLen
+       CK_BYTE *pContextData
+
+    cdef struct CK_FUNCTION_LIST:
+        CK_VERSION version
+        ## pointers to library functions are stored here
+        ## caution: order matters!
+
+        ## general purpose
+        CK_RV C_Initialize(void *) nogil
+
+        CK_RV C_Finalize(void *) nogil
+
+        CK_RV C_GetInfo(CK_INFO *info) nogil
+
+        CK_RV C_GetFunctionList(CK_FUNCTION_LIST **) nogil
+
+        ## slot and token management
+        CK_RV C_GetSlotList(CK_BBOOL tokenPresent,
+                            CK_SLOT_ID *slotList,
+                            CK_ULONG *count) nogil
+
+        CK_RV C_GetSlotInfo(CK_SLOT_ID slotID,
+                            CK_SLOT_INFO *info) nogil
+
+        CK_RV C_GetTokenInfo(CK_SLOT_ID slotID,
+                             CK_TOKEN_INFO *info) nogil
+
+        CK_RV C_GetMechanismList(CK_SLOT_ID slotID,
+                                 CK_MECHANISM_TYPE *mechanismList,
+                                 CK_ULONG *count) nogil
+
+        CK_RV C_GetMechanismInfo(CK_SLOT_ID slotID,
+                                 CK_MECHANISM_TYPE mechanism,
+                                 CK_MECHANISM_INFO *info) nogil
+
+        CK_RV C_InitToken(CK_SLOT_ID slotID,
+                          CK_UTF8CHAR *pPin,
+                          CK_ULONG ulPinLen,
+                          CK_UTF8CHAR *pLabel) nogil
+
+        CK_RV C_InitPIN(CK_SESSION_HANDLE hSession,
+                        CK_UTF8CHAR *pPin,
+                        CK_ULONG ulPinLen) nogil
+
+        CK_RV C_SetPIN(CK_SESSION_HANDLE hSession,
+                       CK_UTF8CHAR *pOldPin,
+                       CK_ULONG ulOldLen,
+                       CK_UTF8CHAR *pNewPin,
+                       CK_ULONG ulNewLen) nogil
+
+        ## session management
+        CK_RV C_OpenSession(CK_SLOT_ID slotID,
+                            CK_FLAGS flags,
+                            void *application,
+                            void *notify,
+                            CK_SESSION_HANDLE *handle) nogil
+
+        CK_RV C_CloseSession(CK_SESSION_HANDLE session) nogil
+
+        CK_RV C_CloseAllSessions(CK_SLOT_ID slotID) nogil
+
+        CK_RV C_GetSessionInfo(CK_SESSION_HANDLE hSession,
+                               CK_SESSION_INFO *pInfo) nogil
+
+        CK_RV C_GetOperationState(CK_SESSION_HANDLE hSession,
+                                  CK_BYTE *pOperationState,
+                                  CK_ULONG *pulOperationStateLen) nogil
+
+        CK_RV C_SetOperationState(CK_SESSION_HANDLE hSession,
+                                  CK_BYTE *pOperationState,
+                                  CK_ULONG ulOperationStateLen,
+                                  CK_OBJECT_HANDLE hEncryptionKey,
+                                  CK_OBJECT_HANDLE hAuthenticationKey) nogil
+
+        CK_RV C_Login(CK_SESSION_HANDLE session,
+                      CK_USER_TYPE userType,
+                      CK_UTF8CHAR *pin,
+                      CK_ULONG pinLen) nogil
+
+        CK_RV C_Logout(CK_SESSION_HANDLE session) nogil
+
+        ## object management
+        CK_RV C_CreateObject(CK_SESSION_HANDLE session,
+                             CK_ATTRIBUTE *template,
+                             CK_ULONG count,
+                             CK_OBJECT_HANDLE *key) nogil
+
+        CK_RV C_CopyObject(CK_SESSION_HANDLE session,
+                           CK_OBJECT_HANDLE key,
+                           CK_ATTRIBUTE *template,
+                           CK_ULONG count,
+                           CK_OBJECT_HANDLE *new_key) nogil
+
+        CK_RV C_DestroyObject(CK_SESSION_HANDLE session,
+                              CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_GetObjectSize(CK_SESSION_HANDLE hSession,
+                              CK_OBJECT_HANDLE hObject,
+                              CK_ULONG *pulSize) nogil
+
+        CK_RV C_GetAttributeValue(CK_SESSION_HANDLE session,
+                                  CK_OBJECT_HANDLE key,
+                                  CK_ATTRIBUTE *template,
+                                  CK_ULONG count) nogil
+
+        CK_RV C_SetAttributeValue(CK_SESSION_HANDLE session,
+                                  CK_OBJECT_HANDLE key,
+                                  CK_ATTRIBUTE *template,
+                                  CK_ULONG count) nogil
+
+        CK_RV C_FindObjectsInit(CK_SESSION_HANDLE session,
+                                CK_ATTRIBUTE *template,
+                                CK_ULONG count) nogil
+
+        CK_RV C_FindObjects(CK_SESSION_HANDLE session,
+                            CK_OBJECT_HANDLE *objects,
+                            CK_ULONG objectsMax,
+                            CK_ULONG *objectsLength) nogil
+
+        CK_RV C_FindObjectsFinal(CK_SESSION_HANDLE session) nogil
+
+        ## encryption and decryption
+        CK_RV C_EncryptInit(CK_SESSION_HANDLE session,
+                            CK_MECHANISM *mechanism,
+                            CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_Encrypt(CK_SESSION_HANDLE session,
+                        CK_BYTE *plaintext,
+                        CK_ULONG plaintext_len,
+                        CK_BYTE *ciphertext,
+                        CK_ULONG *ciphertext_len) nogil
+
+        CK_RV C_EncryptUpdate(CK_SESSION_HANDLE session,
+                              CK_BYTE *part_in,
+                              CK_ULONG part_in_len,
+                              CK_BYTE *part_out,
+                              CK_ULONG *part_out_len) nogil
+
+        CK_RV C_EncryptFinal(CK_SESSION_HANDLE session,
+                             CK_BYTE *part_out,
+                             CK_ULONG *part_out_len) nogil
+
+        CK_RV C_DecryptInit(CK_SESSION_HANDLE session,
+                            CK_MECHANISM *mechanism,
+                            CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_Decrypt(CK_SESSION_HANDLE session,
+                        CK_BYTE *ciphertext,
+                        CK_ULONG ciphertext_len,
+                        CK_BYTE *plaintext,
+                        CK_ULONG *plaintext_len) nogil
+
+        CK_RV C_DecryptUpdate(CK_SESSION_HANDLE session,
+                              CK_BYTE *part_in,
+                              CK_ULONG part_in_len,
+                              CK_BYTE *part_out,
+                              CK_ULONG *part_out_len) nogil
+
+        CK_RV C_DecryptFinal(CK_SESSION_HANDLE session,
+                             CK_BYTE *part_out,
+                             CK_ULONG *part_out_len) nogil
+
+        ## Message digests
+        CK_RV C_DigestInit(CK_SESSION_HANDLE session,
+                           CK_MECHANISM *mechanism) nogil
+
+        CK_RV C_Digest(CK_SESSION_HANDLE session,
+                       CK_BYTE *data,
+                       CK_ULONG data_len,
+                       CK_BYTE *digest,
+                       CK_ULONG *digest_len) nogil
+
+        CK_RV C_DigestUpdate(CK_SESSION_HANDLE session,
+                             CK_BYTE *data,
+                             CK_ULONG data_len) nogil
+
+        CK_RV C_DigestKey(CK_SESSION_HANDLE session,
+                          CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_DigestFinal(CK_SESSION_HANDLE session,
+                            CK_BYTE *digest,
+                            CK_ULONG *digest_len) nogil
+
+        ## Signing and MACing
+        CK_RV C_SignInit(CK_SESSION_HANDLE session,
+                         CK_MECHANISM *mechanism,
+                         CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_Sign(CK_SESSION_HANDLE session,
+                     CK_BYTE *text,
+                     CK_ULONG text_len,
+                     CK_BYTE *signature,
+                     CK_ULONG *sig_len) nogil
+
+        CK_RV C_SignUpdate(CK_SESSION_HANDLE session,
+                           CK_BYTE *part,
+                           CK_ULONG part_len) nogil
+
+        CK_RV C_SignFinal(CK_SESSION_HANDLE session,
+                          CK_BYTE *signature,
+                          CK_ULONG *sig_len) nogil
+
+        CK_RV C_SignRecoverInit(CK_SESSION_HANDLE session,
+                                CK_MECHANISM *mechanism,
+                                CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_SignRecover(CK_SESSION_HANDLE session,
+                            CK_BYTE *text,
+                            CK_ULONG text_len,
+                            CK_BYTE *signature,
+                            CK_ULONG *sig_len) nogil
+
+
+        ## Verifying signatures and MACs
+        CK_RV C_VerifyInit(CK_SESSION_HANDLE session,
+                           CK_MECHANISM *mechanism,
+                           CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_Verify(CK_SESSION_HANDLE session,
+                       CK_BYTE *text,
+                       CK_ULONG text_len,
+                       CK_BYTE *signature,
+                       CK_ULONG sig_len) nogil
+
+        CK_RV C_VerifyUpdate(CK_SESSION_HANDLE session,
+                             CK_BYTE *text,
+                             CK_ULONG text_len) nogil
+
+        CK_RV C_VerifyFinal(CK_SESSION_HANDLE session,
+                            CK_BYTE *signature,
+                            CK_ULONG sig_len) nogil
+
+        CK_RV C_VerifyRecoverInit(CK_SESSION_HANDLE session,
+                                  CK_MECHANISM *mechanism,
+                                  CK_OBJECT_HANDLE key) nogil
+
+        CK_RV C_VerifyRecover(CK_SESSION_HANDLE session,
+                              CK_BYTE *text,
+                              CK_ULONG text_len,
+                              CK_BYTE *signature,
+                              CK_ULONG sig_len) nogil
+
+        ## dual-function crypto operations
+        CK_RV C_DigestEncryptUpdate(CK_SESSION_HANDLE session,
+                                    CK_BYTE *data,
+                                    CK_ULONG data_len,
+                                    CK_BYTE *encrypted,
+                                    CK_ULONG *encrypted_len) nogil
+
+        CK_RV C_DecryptDigestUpdate(CK_SESSION_HANDLE session,
+                                    CK_BYTE *encrypted,
+                                    CK_ULONG encrypted_len,
+                                    CK_BYTE *data,
+                                    CK_ULONG *data_len) nogil
+
+        CK_RV C_SignEncryptUpdate(CK_SESSION_HANDLE session,
+                                  CK_BYTE *part,
+                                  CK_ULONG part_len) nogil
+
+        CK_RV C_DecryptVerifyUpdate(CK_SESSION_HANDLE session,
+                                    CK_BYTE *text,
+                                    CK_ULONG text_len) nogil
+
+        ## key management
+        CK_RV C_GenerateKey(CK_SESSION_HANDLE session,
+                            CK_MECHANISM *mechanism,
+                            CK_ATTRIBUTE *template,
+                            CK_ULONG count,
+                            CK_OBJECT_HANDLE *key) nogil
+
+        CK_RV C_GenerateKeyPair(CK_SESSION_HANDLE session,
+                                CK_MECHANISM *mechanism,
+                                CK_ATTRIBUTE *public_template,
+                                CK_ULONG public_count,
+                                CK_ATTRIBUTE *private_template,
+                                CK_ULONG private_count,
+                                CK_OBJECT_HANDLE *public_key,
+                                CK_OBJECT_HANDLE *private_key) nogil
+
+        CK_RV C_WrapKey(CK_SESSION_HANDLE session,
+                        CK_MECHANISM *mechanism,
+                        CK_OBJECT_HANDLE wrapping_key,
+                        CK_OBJECT_HANDLE key_to_wrap,
+                        CK_BYTE *wrapped_key,
+                        CK_ULONG *wrapped_key_len) nogil
+
+        CK_RV C_UnwrapKey(CK_SESSION_HANDLE session,
+                          CK_MECHANISM *mechanism,
+                          CK_OBJECT_HANDLE unwrapping_key,
+                          CK_BYTE *wrapped_key,
+                          CK_ULONG wrapped_key_len,
+                          CK_ATTRIBUTE *attrs,
+                          CK_ULONG attr_len,
+                          CK_OBJECT_HANDLE *unwrapped_key) nogil
+
+        CK_RV C_DeriveKey(CK_SESSION_HANDLE session,
+                          CK_MECHANISM *mechanism,
+                          CK_OBJECT_HANDLE src_key,
+                          CK_ATTRIBUTE *template,
+                          CK_ULONG count,
+                          CK_OBJECT_HANDLE *new_key) nogil
+
+        ## random number generation
+        CK_RV C_SeedRandom(CK_SESSION_HANDLE session,
+                           CK_BYTE *seed,
+                           CK_ULONG length) nogil
+
+        CK_RV C_GenerateRandom(CK_SESSION_HANDLE session,
+                               CK_BYTE *random,
+                               CK_ULONG length) nogil
+
+
+        ## parallel processing
+        CK_RV C_GetFunctionStatus(CK_SESSION_HANDLE session) nogil
+
+        CK_RV C_CancelFunction(CK_SESSION_HANDLE session) nogil
+
+        ## smart card events
+        CK_RV C_WaitForSlotEvent(CK_FLAGS flags,
+                                 CK_SLOT_ID *slot,
+                                 void *pRserved) nogil
+
+# The only external API call that must be defined in a PKCS#11 library
+# All other APIs are taken from the CK_FUNCTION_LIST table
+ctypedef CK_RV (*C_GetFunctionList_ptr) (CK_FUNCTION_LIST **) nogil
+
+
+cdef inline CK_BYTE_buffer(length):
+    """Make a buffer for `length` CK_BYTEs."""
+    return array(shape=(length,), itemsize=sizeof(CK_BYTE), format='B')
+
+
+cdef inline CK_ULONG_buffer(length):
+    """Make a buffer for `length` CK_ULONGs."""
+    return array(shape=(length,), itemsize=sizeof(CK_ULONG), format='L')
+
+
+cdef inline bytes _pack_attribute(key, value):
+    """Pack a Attribute value into a bytes array."""
+
+    try:
+        pack, _ = ATTRIBUTE_TYPES[key]
+        return pack(value)
+    except KeyError:
+        raise NotImplementedError("Can't pack this %s. "
+                                  "Expand ATTRIBUTE_TYPES!" % key)
+
+
+cdef inline _unpack_attributes(key, value):
+    """Unpack a Attribute bytes array into a Python value."""
+
+    try:
+        _, unpack = ATTRIBUTE_TYPES[key]
+        return unpack(bytes(value))
+    except KeyError:
+        raise NotImplementedError("Can't unpack this %s. "
+                                  "Expand ATTRIBUTE_TYPES!" % key)