PyKCS11 - PKCS#11 Wrapper for Python - Project Overview


  • Copyright (C) 2004 Midori (midori -- a-t -- paipai dot net)
  • Copyright (C) 2006-2012 Ludovic Rousseau (ludovic.rousseau@free.fr)


This file is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA


The API documentation is available at http://pkcs11wrap.sourceforge.net/api/

Unix Howto

To install:

$ make build
$ make install (or make install DESTDIR=/foo/bar)

Windows Howto


  • Install python3 (and add "C:Python34;C:Python34Scripts" to PATH environment variable)
  • Install swig (and add swig install folder to PATH environment variable)
  • Install Visual studio 2010 SDK

To install:

Open "Visual Studio command prompt (2010)"

cd to PyKCS11 folder and run:

> nmake -f Makefile.win32 build
> nmake -f Makefile.win32 install

Known Bugs

If in Windows the linker complains that the Python24_d.lib doesn't exists Please edit the "SWIG-Install-DirLibpythonpython.swg" file and replace following line:

#include "Python.h"

with following code:

#ifdef _DEBUG
  #undef _DEBUG
  #include "Python.h"
  #define _DEBUG
  #include "Python.h"

This prevents the linker to try to link against the debug version of python lib that doesn't come with the standard distribution.


1.3.0 - July 2014, Ludovic Rousseau
  • add Python3 support
1.2.4 - April 2012, Ludovic Rousseau
  • improve epydoc documentation
  • add pinpad support in C_Login() using pin=None
  • add pinpad support in samples getinfo.py and dumpit.py
  • add createObject()
1.2.3 - December 2010, Ludovic Rousseau
  • Add new classes CK_SLOT_INFO, CK_INFO, CK_SESSION_INFO, CK_MECHANISM_INFO and CK_TOKEN_INFO instead of the low level ones to have a __repr__() method. It is now possible to just print an object of these classes and have a human readable version.
  • Add a new class CK_OBJECT_HANDLE() to replace the low level one and have a __repr__() method for objects returned by findObjects()
  • Move initToken() from class Session to class PyKCS11Lib and add a slot parameter.
  • Add generateKeyPair and destoryObject support in high level interface
1.2.2 - June 2010, Ludovic Rousseau
Debug low level C_GenerateRandom Add seedRandom() and generateRandom() in the high level API
1.2.1 - November 2008, Ludovic Rousseau
Use src/opensc/pkcs11.h instead of src/rsaref/* files since the
files from RSA are not free enough (no right to distribute modified versions for example)

improve samples/getinfo.py script bug fixes

1.2.0 - August 2008, Ludovic Rousseau
add getMechanismList() and getMechanismInfo() add Session().getSessionInfo() bug fixes
1.1.1 - December 2006, Giuseppe Amato (Midori)
bug fixes
1.1.0 - August 2006, Ludovic Rousseau
Introduce high level API
1.0.2 - July 2006, Ludovic Rousseau
port to Unix (tested on GNU/Linux only) explicit call to SWIG to generate the wrapper
1.0.1 - 2004 Giuseppe Amato (Midori)
first version Windows only