SPYRUS LYNKS (Fortezza) USB HSM - anyone have the En-Sign / SPEX PKCS#11 or legacy driver? #3802
Unanswered
borjatarraso
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I have a working SPYRUS LYNKS Series II USB HSM (08df:0a00, the older Fortezza-derived token) and I'm trying to use it on Linux/Windows.
What I've found: the only public driver is the WHQL smart-card shim (SCARDLYNKSUSBW.sys), which registers it as a reader but can't do crypto - SCardConnect fails SCARD_E_PROTO_MISMATCH because the card presents a proprietary protocol (ATR declares T=14). I've reverse-engineered the transport (bulk EP1/EP2) and recovered the command structure from spex32.dll, but the bulk channel stays gated (every write → 0xff); the channel-enable + framing live only in SPYRUS's legacy SPEX kernel driver / En-Sign stack, which isn't public. pcsc-lite/ccid don't list PID 0x0a00, and OpenSC has no LYNKS driver.
Does anyone happen to have the LYNKS-capable SPYRUS middleware - the En-Sign / En-Sign NG SDK (PKCS11sc.dll + a Linux libpkcs11*.so) or the legacy SPEX driver/CSP? SPYRUS is defunct (now Route1); I'm also reaching out to the original developers. Any copy, pointer, or even confirmation it's gone would be hugely appreciated. Happy to share my RE notes.
Thanks!
Borja Tarraso
All reactions