Good news: I could verify your ppa successfully. I ran into several problems setting up a test system for this verification, but finally got it to work.
Output from the pkcsep11_migrate utility without your ppa:
# pkcsep11_migrate -slot 4 -adapter 16 -domain 76
Using slot #4...
Enter the USER PIN:
Card ID 0x10, domain ID 76 has committed pending(next) WK
going to reencrpyt key 0 with blob len 0 rsakey
reencryption success obj 0 rsakey
going to reencrpyt key 1 with blob len 30820122300d0609 rsakey
reencrypt cmd block construction failed
Output after I applied the ppa:
# pkcsep11_migrate -slot 4 -adapter 16 -domain 76
Using slot #4...
Enter the USER PIN:
Card ID 0x10, domain ID 76 has committed pending(next) WK
going to reencrpyt key 0 with blob len 970: 'rsakey'
reencryption success obj: 0 rsakey:
going to reencrpyt key 1 with blob len 1a6: 'rsakey'
reencryption success obj: 1 rsakey:
all keys successfully reencrypted
So ok from my side. Sorry for the long delay!
Joerg
------- Comment From <email address hidden> 2020-11-12 11:07 EDT-------
Hello Brian,
Good news: I could verify your ppa successfully. I ran into several problems setting up a test system for this verification, but finally got it to work.
Output from the pkcsep11_migrate utility without your ppa:
# pkcsep11_migrate -slot 4 -adapter 16 -domain 76
Using slot #4...
Enter the USER PIN:
Card ID 0x10, domain ID 76 has committed pending(next) WK
going to reencrpyt key 0 with blob len 0 rsakey
reencryption success obj 0 rsakey
going to reencrpyt key 1 with blob len 30820122300d0609 rsakey
reencrypt cmd block construction failed
Output after I applied the ppa:
# pkcsep11_migrate -slot 4 -adapter 16 -domain 76
Using slot #4...
Enter the USER PIN:
Card ID 0x10, domain ID 76 has committed pending(next) WK
going to reencrpyt key 0 with blob len 970: 'rsakey'
reencryption success obj: 0 rsakey:
going to reencrpyt key 1 with blob len 1a6: 'rsakey'
reencryption success obj: 1 rsakey:
all keys successfully reencrypted
So ok from my side. Sorry for the long delay!
Joerg