Simulating Hardware security module

Question

I want to implement part of HSM but first I need to simulate it in software. I want to have a complete isolated enviroment(?) that works like real HSM. My chosen API is pkcs#11 .

should i do something like cryptech,implementing pkcs#11 as rpc ? Can i translate pkcs#11 commands and use one of the many cryptographic libraries that are available ? ( cryptlib & OpenSSL & ... )

PS : I know softHSM but i want something that i completely know how it works and i can configure it + good documentation which i didn't find about softHSM.

Thanks

Answer 1

Some vendors provide an emulated/simulated HSM environment, at least:

• Gemalto ProtectServer HSM

• Utimaco CryptoServer HSM

But to be honest I do not understand your SoftHSM dislike as basically all you need to know is the PKCS#11 API (moreover you can see the source code -- you couldn't ask for more insight).

Good luck!

EDIT>

[Given your comment]: The publicly available security policies of existing devices might be an interesting read to get some insight into HSM internals.