Decrypt Sender´s Message (Linux)

1. Decrypt the encryptedsignedmessage.txt using the receiver’s private key

# openssl cms -engine pkcs11 -decrypt -in encryptedsignedmessage.txt - inkey "pkcs11:token=SSLCert1;object=ReceiverKey" -keyform engine -out decryptedsignedmessage.txt

Figure 32: Openssl decrypt command output

Here SSLCert1 is the token label and ReceiverKey is the key on the HSM. Provide Cryptouser PIN when prompted.