hssfilever

A tool to verify the HSS or LMS signature on a file.

The Luna HSM performs HSS or LMS multipart signatures, but does not do multipart verifications. hssfilever is provided for that purpose. As of Luna HSM Client version UC 10.9.1 hssfilever is a Linux-only tool; after client installation, the tool is found in /usr/safenet/lunaclient/bin (default location).

This is a standalone utility and does not require an HSM to operate.

Usage:

hssfilever [key name] [file to verify] [sig file]

where:

[key name] is the name of a file holding a HSS or LMS public key, optionally DER encoded or PEM format. You can use Ckdemo Object Management option 32 - Extract Public Key to create the key file publickey.bin

[sig file] is an HSS or LMS signature in binary (raw format) - you can use SIGN.BIN from CKDemo.

[file to verify] - In CKDemo use Option 98 to change sub-option 9 to allow signing of files.