pkcs11

Open source smart card tools and middleware. PKCS#11/MiniDriver

A simple TLS proxy with mutual authentication for securing non-TLS services.

X Certificate and Key management

pyHanko: sign and stamp PDF files

XiPKI: Compact open source PKI (CA, OCSP responder, certificate protocols ACME, CMP, EST, SCEP), with full support of PQC MLDSA (Dilithium) and MLKEM (Kyber).

Windows Secure Shell Client With Support For Smart Cards, Certificates, & FIDO Keys

Go implementation of the keyless protocol

Cross-platform PDF digital signing tool. JavaFX desktop UI with drag-to-place visible signatures, PKCS#11/PKCS#12 keystores, RFC 3161 timestamping, OCSP/CRL long-term validation, and a scriptable CLI.

pkcs11 wrapper for Go

A PKCS#11 interface for TPM2 hardware

Command line tool for the YubiKey PIV application

Managed .NET wrapper for unmanaged PKCS#11 libraries

en-crypt, de-crypt, si-gn, ve-rify - smime, pdf, xades and plain files in pure python

Implement crypto.Signer and crypto.Decrypter for HSM-protected keys via PKCS#11

eID Middleware (main repository)

A set of tools to manage objects on PKCS#11 cryptographic tokens. Compatible with many PKCS#11 library, including major HSM brands, as well as software tokens such as NSS, softoken and kryoptic.

Bouncy Hsm is a software simulator of HSM and smartcard simulator with HTML UI, REST API and PKCS#11 interface.

PKCS#11/Cryptoki support for Python

PKCS#11 library and tools for Linux and AIX. Includes tokens supporting IBM crypto hardware as well as a software token.

A Node.js implementation of the PKCS#11 2.40 interface