5 releases (3 breaking)

new 0.4.0 Oct 9, 2019
0.3.1 Nov 2, 2018
0.3.0 Nov 2, 2018
0.2.0 Nov 12, 2017
0.1.0 Nov 9, 2017

#47 in Hardware support

Download history 55/week @ 2019-06-26 8/week @ 2019-07-03 15/week @ 2019-07-10 12/week @ 2019-07-17 5/week @ 2019-07-24 58/week @ 2019-07-31 112/week @ 2019-08-07 156/week @ 2019-08-14 164/week @ 2019-08-21 177/week @ 2019-08-28 144/week @ 2019-09-04 174/week @ 2019-09-11 272/week @ 2019-09-18 198/week @ 2019-09-25 158/week @ 2019-10-02

558 downloads per month


4.5K SLoC

Rust PKCS#11 Library

This is a library which brings support for PKCS#11 to Rust. It is aiming at having both a very low-level API to map the PKCS#11 functionality to Rust as well as having a higher-level API for more easy usage as well as bringing more safety for programming against PKCS#11.


Testing is currently done with SoftHSM2. A trillion thanks to the people at OpenDNSSEC for writing SoftHSM. This makes it possible to develop applications that need to support PKCS#11. I would have no idea what to do without it. (Suggestions are always welcome.)


Here is a list of the implementation status and plans on what to do next:

  • Dynamic loading of PKCS#11 module (thanks to libloading)
  • Initializing and Dropping PKCS#11 context
  • Implementing Token and PIN Management functions
  • Implementing Session Management functions
  • Implementing Object Management functions
  • Implementing Key Management functions
  • Implementing Encryption/Decryption functions (TODO: tests still missing)
  • Implementing Message Digest functions (TODO: tests still missing)
  • Implementing Signing and MACing (TODO: tests still missing)
  • Implementing Verifying of signatures and MACs (TODO: tests still missing)
  • Implementing Dual-function cryptographic operations (TODO: tests still missing)
  • Implementing Legacy PKCS#11 functions
  • Reorganize code of low-level API (too bloated, which we all know is what PKCS#11 is like)
  • Import the rest of the C header pkcs11t.h types into rust
  • Import the rest of the C header pkcs11f.h functions into rust
  • C type constants to string converter functions, and the reverse (maybe part of the high-level API?)
  • Design and implement high-level API
  • Publish on crates.io (wow, that was easy)
  • Write and Generate Documentation for Rust docs
  • Better Testing (lots of repetitive code + we need a testing framework and different SoftHSM versions for different platforms)


~21K SLoC