A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

A simple SSL/TLS proxy with mutual authentication for securing non-TLS services.

Go implementation of the keyless protocol

pkcs11 wrapper for Go

Tezos remote signer with policies, Prometheus metrics, and HSM/KMS + TEE backends (YubiHSM, CloudHSM, Nitro Enclaves, Confidential Space).

🔐 step plugin to manage keys and certificates on a cloud KMSs and HSMs

SSH CA Client/Server

An implementation of the Enrollment over Secure Transport (EST) certificate enrollment protocol

A simple service for interacting with an HSM or other PKCS#11 device.

Lustre HSM tools

gRPC service that leverages a remote or local HSM/TPM to encrypt Kubernetes data at-rest with KMS v2.

A golang KMIP client and server library, supporting KMIP v1.0 to v1.4.

The Vault HSM PKI plugin overlays the modifications to the builtin PKI plugin that enable support for certificate signing using a Hardware Security Module via PKCS#11.

TPM based Google Cloud Credential Access Token

🔐 Wrap keys from HSM using CKM_RSA_AES_KEY_WRAP step by step

Go library for creating pkcs11 modules

Browse and manage your KMIP objects in your terminal

Go PKCS#11 helper module for certificate signing using HSMs.

This is a plugin for HashiCorp Vault that implements storing data objects into HSM devices using PKCS#11

Use S3 storage as a HSM for dCache