> In fact the PIN maximum length is a property of the HSM
> so I'll dig in the new PKCS#11 v2.40 specs I copied from OASIS
> some hours ago to see if there is useful about it in them...
 
=> ulMinPinLen and ulMaxPinLen are members
of the CK_TOKEN_INFO structure, so one can check
for the range used by its HSM(s).
Of course, the PKCS#11 specs give nothing about the
reasonable values... SoftHSMv2 uses the 4..255 range
(so 32 could be too small).

BTW, what is the HSM where you need long PINs?