👤 Identity and Access Management knowledge for cloud platforms

Block's Bitcoin Cold Storage solution.

Protecting cryptographic signing keys and seed secrets with Multi-Party Computation.

An End-to-End Distributed and Scalable Cloud KMS (Key Management System) built on top of Intel SGX enclave-based HSM (Hardware Security Module), aka eHSM.

HSM documentation

golang crypto.Signer for Trusted Platform Module (TPM)

HSM library that uses wolfCrypt as it's fallback crypto

Zion Key Management Service

Hardware-based password/SSH key/secret manager for people serious about security

The Vault HSM PKI plugin overlays the modifications to the builtin PKI plugin that enable support for certificate signing using a Hardware Security Module via PKCS#11.

Platform software for Trusted Computing - TPM 2.0, Certificate Authority, and Web Services required to perform Local and Remote Attestation, provision, deploy, manage, and secure connected devices and networks at scale.

A set of tools for Secure Hardware Extension

AegisSovereignAI: The Cross-Ecosystem Trust Layer for the Distributed Enterprise. Verifiable Identity, Hardware-Rooted Integrity, and Sovereign AI Governance - from Silicon to Prompt. Unifying AI, Cloud-Native, and Decentralized architectures.

An HSM simulator implemented in Java, ANSI X9, 3DES, DUKPT, etc..

Running Rust code on nCipher HSMs (using CodeSafe).

Build your own Certificate Authority to implement certificate chain

Crypto microbenchmarking tool.

A cheat sheet of PKCS11 command to use Nitrokey HSM 2 (or other PKCS11 HSM)

HashiCorp Vault Community Edition for REST-based Securosys HSM and CloudsHSM integration with enhanced features (multi-authorization).

Generate and verify JWT tokens with PKCS-11

Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables private Bitcoin wallet key recovery through buffer overflow exploitation and shell metacharacters in the F5OS-A FIPS security module

HashiCorp Vault Secrets Engine plugin for REST-based Securosys HSM and CloudsHSM integration with enhanced features (ECIES, multi-authorization).

A simple CLI Tool to view, inspect and debug PKCS11 compliant Hardware and Software HSMs.

Setup guide for Luna Key Broker for Double Key Encryption

Five thousand randomly placed needles

Introduction into pkcs11 and integrations with hsm using softhsm.

🛡️ Exploit the Scalar Venom Attack (CVE-2025-60013) to expose vulnerabilities in hardware security modules, enhancing Bitcoin wallet security against private key theft.

OpenSSL 3.x provider for AWS KMS key operations

PIN Input Typing Assistant™ (PITA) Windows dev tool.

This project is an Adafruit BLE Feather based prototype of the Crater Dog Technologies™ Hardware Security Module (HSM).