Golang wrapper for IBM EP11 crypto library

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

Browse and manage your KMIP objects in your terminal

A golang KMIP client and server library, supporting KMIP v1.0 to v1.4.

A simple SSL/TLS proxy with mutual authentication for securing non-TLS services.

🔐 step plugin to manage keys and certificates on a cloud KMSs and HSMs

pkcs11 wrapper for Go

A simple service for interacting with an HSM or other PKCS#11 device.

Tezos remote signer with policies, Prometheus metrics, and HSM/KMS + TEE backends (YubiHSM, CloudHSM, Nitro Enclaves, Confidential Space).

Go implementation of the keyless protocol

An implementation of the Enrollment over Secure Transport (EST) certificate enrollment protocol

gRPC service that leverages a remote or local HSM/TPM to encrypt Kubernetes data at-rest with KMS v2.

Designed for Nemesis, Harpocrates delivers secure and well-tested primitives for encryption, decryption, key and nonce management, and key fingerprinting using AES-256-GCM with advanced optimizations including cipher caching, buffer pooling, and cache-line tuned algorithms.

This plugin provides key usage by using the luna hsm.

TPM based Google Cloud Credential Access Token

AWS Process Credentials for Trusted Platform Module (TPM)

Go library for creating pkcs11 modules

This repository provides an implementation of a Thales Host Security Module (HSM) emulator written in Go. The emulator is designed to simulate the core functionalities of Thales HSM devices, enabling development, integration testing, or educational use without access to physical HSM hardware.

PKCS-11 Credential Source for Google Cloud SDK

AWS Process Credentials for Hardware Security Module (HSM) with PKCS11