Crypto hardware crates

Question

Crypto hardware crates

iamihalcea opened this issue 3 years ago · 7 comments

Hi!

I was looking at the list of crates mentioned for interfacing with crypto hardware tokens on Awesome Rust Cryptography, and wanted to propose a few more crates:

tss-esapi for interfacing with TPM 2.0 devices
cryptoki for devices exposing a PKCS11 interface
cryptoauthlib for ATECCx08a devices.

Disclaimer: I have a vested interest in the first two crates as one of the main developers, but I think our cryptoki crate is a better option for interfacing with PKCS11 given that pkcs11 seems to have been abandoned. cryptoki is essentially a fork of that one with a bunch of work done on top, mostly to make the interface safer to use.

Should I make a PR adding them to the list?

Answer 1 · 2021-08-17T23:57:52.000Z

Please make a PR, yes,

Answer 2 · 2021-08-18T00:04:37.000Z

@mheese can you advise about the maintenance status of the pkcs11 crate? We are trying to only include actively maintained crates in the Awesome Rust Cryptography list. It looks like it's received some attention but hasn't had a release in awhile.

Answer 3 · 2021-08-25T14:53:35.000Z

I think this was addressed in #42.

However, unless we hear back from @mheese, it might make sense to remove the pkcs11 crate as well.

Answer 4 · 2022-06-23T15:27:42.000Z

@tarcieri - any thoughts on what should be done with pkcs11?

New issue popped-up in the repo today: mheese/rust-pkcs11#54

Answer 5 · 2022-06-24T17:18:00.000Z

@ionut-arm a PR to remove it would be accepted as it seems to be unmaintained.

Likewise you might consider filing an unmaintained crate advisory for pkcs11 at: https://github.com/rustsec/advisory-db

Answer 6 · 2022-10-27T06:18:21.000Z

@tarcieri as I drowned in github notifications and other work, this only gets my attention right now. Yes, it is (obviously) not maintained anymore. Glad to see that the work seemed to have been of some use to @iamihalcea though 👍

Also, happy to discuss if any of you want to take over the pkcs11 crate name.

Answer 7 · 2022-10-27T14:08:47.000Z

If one of the existing PKCS#11 projects like cryptoki wants pkcs11 that's cool. If not, the @RustCrypto org has the other pkcs* crate names and we'll take it (although we wouldn't plan on publishing a crate under it, just in case the other projects go defunct)