👤 Identity and Access Management knowledge for cloud platforms

Block's Bitcoin Cold Storage solution.

Protecting cryptographic signing keys and seed secrets with Multi-Party Computation.

An End-to-End Distributed and Scalable Cloud KMS (Key Management System) built on top of Intel SGX enclave-based HSM (Hardware Security Module), aka eHSM.

HSM documentation

golang crypto.Signer for Trusted Platform Module (TPM)

HSM library that uses wolfCrypt as it's fallback crypto

Zion Key Management Service

Hardware-based password/SSH key/secret manager for people serious about security

The Vault HSM PKI plugin overlays the modifications to the builtin PKI plugin that enable support for certificate signing using a Hardware Security Module via PKCS#11.

Platform software for Trusted Computing - TPM 2.0, Certificate Authority, and Web Services required to perform Local and Remote Attestation, provision, deploy, manage, and secure connected devices and networks at scale.

AegisSovereignAI: The Cross-Ecosystem Trust Layer for the Distributed Enterprise. Verifiable Identity, Hardware-Rooted Integrity, and Sovereign AI Governance - from Silicon to Prompt. Unifying AI, Cloud-Native, and Decentralized architectures.

A set of tools for Secure Hardware Extension

An HSM simulator implemented in Java, ANSI X9, 3DES, DUKPT, etc..

Running Rust code on nCipher HSMs (using CodeSafe).

An open-source book on HSM (Hardware Security Module) for automotive and embedded systems. Complete coverage from PKCS#11 v3.1 standard to SoftHSM2 source code, with a hands-on hsm-lite implementation (~620 lines C) and real-world SDK integration experience.

Build your own Certificate Authority to implement certificate chain

Crypto microbenchmarking tool.

A cheat sheet of PKCS11 command to use Nitrokey HSM 2 (or other PKCS11 HSM)

Open-source USB security token (mini HSM) on RP2040 + Microchip ATECC608B. ECDSA P-256 with PIN + touch-to-sign, designed for smart-lock authentication. no_std Rust workspace, full bring-up tooling and ATECC608B driver included.