Home

OpenSSL engine for PKCS#11 modules

engine_pkcs11 is an implementation of the OpenSSL engine interface. It is meant to interface the OpenSSL library with PKCS#11 hardware drivers, such as OpenSC.

engine_pkcs11 uses the libp11 library to interface with PKCS#11.

Supported algorithms

• RSA with PKCS#1 padding (CKM_RSA_PKCS)
• ECDSA (when used with OpenSSL 1.0.2 and above)

License

engine_pkcs11 is written by an international team. It is a free software licensed under a two-clause BSD license:

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.

Important Links

• Download the engine_pkcs11 releases
• Installation overview
• Important changes
• Mailing lists

Reporting Bugs

Please file bug reports by creating GitHub issues.