HSM

use lager::LagerBox;

let lager = LagerBox::from_env()?;
let hsm = lager.hsm("hsm1");

use lager::HsmAuth;

let auth = HsmAuth::new(std::env::var("HSM_PASSWORD").expect("HSM_PASSWORD"));
let other = HsmAuth::with_key(2, "another-password");

pub struct GenerateKey {
    pub algorithm: String,        // "ec-p256", "ec-p384", "ec-p521", "ec-k256", "ed25519"
    pub object_id: u16,           // 0 lets the HSM pick one
    pub label: String,
    pub domains: Vec<u8>,         // 1-16; empty means domain 1
    pub capabilities: Vec<String>, // empty means the defaults for the algorithm
}

use lager::{GenerateKey, HsmAuth};

let mut spec = GenerateKey::new("ec-p256");
spec.label = "fw-signing".into();
let key = hsm.generate(&auth, &spec)?;
println!("key 0x{:04X}\n{}", key.id, key.public_key_pem);

let signature = hsm.sign(&auth, key.id, b"message to sign", "ecdsa-sha256")?;

use lager::{GenerateKey, HsmAuth, LagerBox};

let lager = LagerBox::from_env()?;
let hsm = lager.hsm("hsm1");
let auth = HsmAuth::new(std::env::var("HSM_PASSWORD").expect("HSM_PASSWORD"));

let key = hsm.generate(&auth, &GenerateKey::new("ed25519"))?;
let signature = hsm.sign(&auth, key.id, b"hello", "eddsa")?;
assert_eq!(signature.len(), 64);
hsm.delete(&auth, key.id, None)?;