List of applications using PKCS 11

This article lists applications and other software implementations using the PKCS #11 standard.

Applications

  • FreeOTFE - Disk encryption system (PKCS #11 can either be used to encrypt critical data block, or as keyfile storage)
  • Mozilla Firefox, a web browser
  • Mozilla Thunderbird, an email client
  • OpenDNSSEC, a DNSSEC signer
  • OpenSSL - TLS/SSL library (with engine_pkcs11)
  • GnuTLS - TLS/SSL library
  • OpenVPN - VPN system
  • StrongSwan - VPN system
  • Truecrypt - Disk encryption system (PKCS #11 only used as trivial keyfile storage)
  • TrouSerS - An open-source TCG Software Stack
  • OpenSC - smartcard library
  • OpenSSH - a Secure Shell implementation (since OpenSSH version 5.4)
  • OpenDS - an open source directory server.
  • GNOME Keyring - a password and cryptographic key manager.
  • Solaris Cryptographic Framework - Pluggable cryptographic system in Operating System
  • Safelayer - KeyOne and TrustedX product suites.

PKCS #11 wrappers

Since PKCS #11 is a complex C API many wrappers exist that let the developer use the API from various languages.

  • NCryptoki - .NET (C# and VB.NET), Silverlight 5 and Visual Basic 6 wrapper for PKCS #11 API
  • PyKCS11 - A wrapper for Python
  • pkcs11 - Another wrapper for Python
  • Java 5.0 includes a wrapper for PKCS #11 API
  • pkcs11-helper - A simple open source C interface to handle PKCS #11 tokens.
  • SDeanComponents - Delphi wrapper for PKCS #11 API
  • jacknji11 - Java wrapper using Java Native Access (JNA)
  • ruby-pkcs11 - Ruby binding for PKCS #11 API
  • pkcs11.net - .NET wrapper for PKCS #11 API
  • Oracle Solaris Cryptographic Framework
  • pkcs11 - Go wrapper for PKCS #11 API