From 8568d2a845cc594021f425624300fb8d6e2abbe7 Mon Sep 17 00:00:00 2001
From: SPChan <shihping.chan@gmail.com>
Date: Wed, 2 Aug 2023 07:39:53 +0800
Subject: [PATCH] Add mechanisms used by Thales Luna HSMs

---
 pkcs11/mechanisms.py | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkcs11/mechanisms.py b/pkcs11/mechanisms.py
index 427c85a..2c18c1c 100644
--- a/pkcs11/mechanisms.py
+++ b/pkcs11/mechanisms.py
@@ -659,6 +659,7 @@ class Mechanism(IntEnum):
     AES_CFB1 = 0x00002108
     AES_KEY_WRAP = 0x00002109
     AES_KEY_WRAP_PAD = 0x0000210A
+    AES_KEY_WRAP_KWP = 0x0000210B
 
     DES_ECB_ENCRYPT_DATA = 0x00001100
     DES_CBC_ENCRYPT_DATA = 0x00001101
@@ -708,6 +709,13 @@ class Mechanism(IntEnum):
 
     _VENDOR_DEFINED = 0x80000000
 
+    # used by Thales LUNA AES_KWP in cmu importkey
+    # for importing PKCS#8 to the HSM:
+    # _VENDOR_DEFINED + 0x170 = CKM_AES_KW
+    # _VENDOR_DEFINED + 0x171 = CKM_AES_KWP
+    VENDOR_DEFINED_170 = _VENDOR_DEFINED + 0x170
+    VENDOR_DEFINED_171 = _VENDOR_DEFINED + 0x171
+
     def __repr__(self):
         return '<Mechanism.%s>' % self.name