What is openCryptoki?

openCryptoki is an open source implementation of the Cryptoki API defined by the PKCS #11 Cryptographic Token Interface Standard. Thus, openCryptoki provides support for several cryptographic algorithms according to the industry-wide PKCS #11 standards. The openCryptoki library loads the so called tokens that provide hardware or software specific support for cryptographic functions.

The EP11 token extends the openCryptoki token library. It uses special hardware cryptographic functions that are provided by an IBM® Crypto Express adapter (starting with CEX4S), which is configured by a certain firmware (see Enabling a cryptographic coprocessor for EP11 firmware exploitation).

openCryptoki can be used directly through the openCryptoki shared library (C API).

For more information about the openCryptoki services, or about the interfaces between the openCryptoki main module and its tokens, see

https://github.com/opencryptoki/opencryptoki.

You can also read topic openCryptoki overview for an introduction of the openCryptoki main features.