Generate PQC keys using pkcs11-tool

[Jakuje]

The tests/setup.sh has a comment about pkcs11-tool not supporting PQC keys. This is no longer the case since opensc 0.27.1, but we need to double-check we have opensc updated in all the environments that run PQC tests (with kryoptic as far as I know for now).

Actually this should already work in current opensc. But I am not sure if it made it already to all our container images.

Originally posted by @Jakuje in #756

[simo5]

Do we have to generate keys using pkcs11-tool, what if we switch all cases to use openssl tools instead and leave use of pkcs11-tool only for initializing the token ?

[Jakuje]

Do we have to generate keys using pkcs11-tool, what if we switch all cases to use openssl tools instead and leave use of pkcs11-tool only for initializing the token ?

Thats the other path we can take. But generating keys with different tool can give us assurance that we do not introduce some symmetric bugs in key generation and reading.