A source distribution and wheels for common platforms have been published to PyPI.
Summary of changes
- Internal restructuring to allow loading (and unloading) multiple PKCS#11 libraries
- Better operation & cancellation management for search, encryption/decryption and signing/verification.
- Allow batch operations for search and attribute fetching.
- Support user-supplied attribute mappings via the
AttributeMapper
class, in a forward-compatible manner. - Enable AES-GCM and AES-CTR in tokens that support these primitives.
- Map
CKR_PIN_LEN_RANGE
error code. - Defensively decode the empty string as
False
for boolean attributes. - Correct X.509 EC public-key extraction logic.
- Test with multiple token implementations in CI (SoftHSMv2 and opencryptoki for now).
There should not be any API-breaking changes in the public API, except for users extending the shim classes in the types
module (e.g. for use in test mocks).