A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

A simple TLS proxy with mutual authentication for securing non-TLS services.

Expressive statecharts and FSMs for modern Python.

LizardFS is an Open Source Distributed File System licensed under GPLv3.

Hierarchical state machines for designing event-driven systems

Block's Bitcoin Cold Storage solution.

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

XiPKI: Compact open source PKI (CA, OCSP responder, certificate protocols ACME, CMP, EST, SCEP), with full support of PQC MLDSA (Dilithium) and MLKEM (Kyber).

Hardware Security Module (HSM) for Raspberry Pico and ESP32

Go implementation of the keyless protocol

A powerful Kotlin Multiplatform state machine library with clean DSL syntax and first-class Kotlin Coroutines support

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

Protecting cryptographic signing keys and seed secrets with Multi-Party Computation.

Cross-platform PDF digital signing tool. JavaFX desktop UI with drag-to-place visible signatures, PKCS#11/PKCS#12 keystores, RFC 3161 timestamping, OCSP/CRL long-term validation, and a scriptable CLI.

pkcs11 wrapper for Go

A feature-rich, scalable, Key Management System

Managed .NET wrapper for unmanaged PKCS#11 libraries

Fluent API for creating state machines in C#

A minimalist UML State machine framework for finite state machine and hierarchical state machine in C

Bouncy Hsm is a software simulator of HSM and smartcard simulator with HTML UI, REST API and PKCS#11 interface.