Java – how does JCA / JCE and pkcs#11 work together?

I want to use HSM (hardware security module) to create an XML file signature I've done some research, but now I'm a little confused

Can you clarify these questions?

>What does a key handle in JCE mean? I've read that it's just a handle and the key is stored elsewhere How is that possible? From my understanding, I load the key into memory and use it, or the signature is completely completed by HSM. I only get the result, right? > Does the pkcs#11 Standard define a way to generate signatures in HSM? I've read the token, but I'm not sure about the signature. > The function list of my HSM describes JCE and PKCs #11 What does this mean? > I think PKCs #11 is a standard, and JCE defines the classes that use it Does JCE specify its own protocol?

Solution

>What does a key handle in JCE mean?

However, JCE providers may be PKCs #11 independent