[Opencryptoki-tech] Adding HSM Rest-API backend

[Sven A. <sv...@an...>]

Hi all,

We are developing an "Open Source HSM" with its primary interface being a
Rest API. However, of course we also need to offer a PKCS#11 driver. So,
the first idea was to write a PKCS#11 module in Go similar to this[1]
project. But we also got pointed to the opencryptoki project, which looks
interesting as well. So my question now is three-fold:

- Do you folks think that opencryptoki is a suitable project to add a
backend for an HSM that is accessed via a Rest-API client?
- Would that backend have to be written in pure C, or is it feasible to do
that in Go or at least in C++?
- Is there documentation helping to get started when adding a new backend?

Thanks for your thoughts and advice,

Sven

[1] https://github.com/niclabs/dtc