hsm

A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.

A simple SSL/TLS proxy with mutual authentication for securing non-TLS services.

LizardFS is an Open Source Distributed File System licensed under GPLv3.

Block's Bitcoin Cold Storage solution.

Highly scalable and high-performance open source PKI (CA and OCSP responder). Minimal dependencies.

Hierarchical state machines for designing event-driven systems

Protecting cryptographic signing keys and seed secrets with Multi-Party Computation.

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

pkcs11 wrapper for Go

Fluent API for creating state machines in C#

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

Managed .NET wrapper for unmanaged PKCS#11 libraries

KStateMachine is a Kotlin DSL library for creating state machines and hierarchical state machines (statecharts).

PKCS#11/Cryptoki support for Python

A minimalist UML State machine framework for finite state machine and hierarchical state machine in C

HSM documentation

An End-to-End Distributed and Scalable Cloud KMS (Key Management System) built on top of Intel SGX enclave-based HSM (Hardware Security Module), aka eHSM.

PKCS#11 library and tools for Linux. Includes tokens supporting TPM and IBM crypto hardware as well as a software token.

C++ framework library to simplify state-driven code

OPTIGA™ Trust M Software Framework