Multi-provider digital signature library for Rust

Tezos remote signer with policies, Prometheus metrics, and HSM/KMS + TEE backends (YubiHSM, CloudHSM, Nitro Enclaves, Confidential Space).

Pure Rust client for YubiHSM2 devices

A Go client for the yubihsm2 binary protocol and connector service

A Setup for creating a Public Key Infrastructure backed by a YubiHSM2

Go support for HSM

Parses the custom extensions on YubiHSM 2 attestation certificates

A Terraform provider for PKCS#11 (mostly authored by Claude)

Go tools for Ethereum

Fork of OpenSC/libp11 adding an opt-in no_login_cache provider parameter that releases the token login session when a key is freed, preventing session-slot exhaustion on capped HSMs (e.g. YubiHSM 2).

YubiHSM playground

Fork of openssl-projects/pkcs11-provider adding an opt-in no-login-cache quirk that releases a token's login session at runtime to prevent session-slot exhaustion on capped HSMs (e.g. YubiHSM 2).