pico-hsm-tool.py broken #126
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
While trying to install and use the pico-hsm-tool.py utility I encounter the following errors:
pip install pypicohsmpackage does not exist.https://github.com/polhenarejos/pypicohsm/ repository was removed? Repository is inaccessible, pip package was removed
I found a fork of it but that does not help much as:
pip install pypicokeypackage does not exist.https://github.com/polhenarejos/pypicokey repository was removed? Repository is inaccessible, pip package was removed
The tool depends on pypicohsm that depends on pypicokey.
pico-hsm-tool.py is listed as the only way to:
Are this features just nuked from existence? Was the free tool replaced with the paid app (rendering a portion of features 'premium only')?
As far as I can see, the app does not allow you to handle ED25519 keys, so this feature is not supported anymore?
https://github.com/polhenarejos/pico-hsm/issues/98
As a summary, you cannot use EdDSA with Pico HSM and PKCS11. If you want to manipulate Edward curves and do EdDSA, you must use the pico-hsm-tool or program your own pkcs11 driver.I ran into this as well and I never managed to generate ed25519 or ed448 keys (and I also tried previously when
pypicohsmwas still available). For me much of the appeal for this project lies in the potential ability to use those curves (as advertised) and it being open source. So I was somewhat disappointed to learn that the new app apparently is not (yet?) open source. I'd gladly pay for it though, especially if it makes the more exotic use cases easier to access, e.g. because there is no PKCS11 support for some things.pico-hsm-toolhas been replaced in favor of PicoKey App.Take a tour on https://docs.picokeys.com/picokeyapp/hsm/key-management/ and see if it meets your needs.
Not only that the tool doesn't yet meet my needs, but is it also neither open-source or free. (or cheap for that matter)
I can't evaluate the app's functionality, can't verify the code, can't trust the pre-built binaries, can't build custom tooling for my needs.
Owner is as well promoting his business product while kneecapping the FOSS project.
I agree with what was said before. I still would've already bought the app if it did let me use anything else than credit card.