hi all
as i understand from this thread http://www.ncryptoki.com/Forums/Thread.aspx?pageid=9&mid=22&ItemID=1&thread=15, format of key to be wrapped is not specified by PKCS11, so it can be any proprietary format of PKCS11 module, but usually PKCS#8 DER encoding is used for private key. What about secret key? Is any format used for secret keys or their value are just encrypted?
I'm using SafeNet HSM and if im exporting security key i will get plain value. Not sure about any other modules... i think you just have to try and experiment with your module.