Appendix E: PKCS#11 Driver Libraries

LibreCrypt logo LibreCrypt: Open-Source disk encryption for Windows


Appendix E: PKCS#11 Driver Libraries

If you have a token which supports the PKCS#11 standard, as most do, your token can be used by LibreCrypt. Below is a list of well known smartcards/tokens which do support this standard, and the suggested library filename to use.

Please note that:

    * Token manufacturers may change their driver filenames without notice; check with your supplier if the information listed below doesn't work. * This list is _not exhaustive_ - many more tokens are supported than are listed here.

If you are using a token which isn't mentioned on the list below, please check with your token supplier as to what to enter, and get in touch to have it added to the list.

Manufacturer Device Library web site Notes
ACS ACOS5 smartcards acospkcs11.dll For use with ACOS5 smartcards. ACOS5 smartcards unable to create data objects, and contain no mechanisms for creating secret keys (except public/private keypairs)
AET Rainbow iKey 3000 series and G&D StarCos 2.3 SPK cards aetpkss1.dll (WWW) aka StarSign Middleware. Also installs PKCS#11 drivers aetpksse.dll (Entrust PKCS#11 lib) and aetpkssw.dll (PKCS #11 library wrapper that detects the need for automatic login on aetpkss1.dll)
Aladdin eToken PRO etpkcs11.dll (WWW) Confirmed working with LibreCrypt
eToken R2 etpkcs11.dll (WWW)
Algorithmic Research MiniKey sadaptor.dll
Aloaha Smart Card Connector aloahapkcs11.dll (WWW) Not fully tested, but from initial checks, this library appears _badly broken - it reports tokens present when no card reader is installed. When creating data objects on the phantom token, it reports that the objects were successfully created, but doesn't actually do anything! Possible that it works correctly if both hardware and token present?
A-Sign A-Sign premium cards psepkcs11.dll Reputedly v1.0 of this library is incomplete and has many bugs??
Athena Athena Smartcard System ASE Card asepkcs.dll
A-Trust a-sign asignp11.dll (WWW)
Belgian Government Belgian Electronic Identity (eID) Card Belgium Identity Card PKCS11.dll
Chrysalis cryst32.dll (WWW) web site no longer exists
LUNA cryst201.dll (WWW) web site no longer exists
Dallas Semiconductors iButton dspkcs.dll
Eracom (hardware) cryptoki.dll Full path to library may be required, e.g: C:\ Program Files\ ERACOM\ Cprov SDK\ bin\ csa\ cryptoki.dll On 1st December2005 Eracom Technologies AG was acquired by SafeNet
(software emulation) cryptoki.dll Full path to library may be required, e.g.: C:\ Program Files\ ERACOM\ Cprov SDK\ bin\ sw\ cryptoki.dll On 1st December2005 Eracom Technologies AG was acquired by SafeNet
Estonian Government Estonian Electronic Identity (eID) Card opensc-pkcs11.dll
Eutron Crypto Identity sadaptor.dll (WWW)
Feitain technologys Co.,Ltd ePass 1000 EP1PK111.DLL (WWW)
ePass 2000 ep2pk11.dll (WWW)
ePass 2000FT11 ngp11v211.dll (WWW) Confirmed working with LibreCrypt
ePass 3000 ngp11v211.dll (WWW)
ePass 3003 ShuttleCsp113003.dll (WWW) Confirmed working with LibreCrypt
Gemplus gclib.dll
pk2priv.dll
GemPlus/GemSoft GemPlus/GemSoft Smartcard w32pk2ig.dll
GemSafe gclib.dll GemSafe new version
pk2priv.dll GemSafe old version
IBM IBM 4758 cryptoki.dll
IBM Digital Signature for the Internet (DSI) for MFC cards CccSigIT.dll
IBM Embededded Security Subsystem csspkcs11.dll
IBM Netfinity PSG Chip1 ibmpkcss.dll
IBM SecureWay Smartcard w32pk2ig.dll
cryptoki.dll
ID2 id2cbox.dll Full path to library may be required, e.g.: C:\ Data\ Development\ SmartCardIntegration\ PKCS11wrapper\ JavaToPKCS11\ demo\ test\ old\ id2cbox.dll
Mozilla/Netscape Mozilla or Netscape crypto module softokn3.dll Cannot be used with LibreCrypt; requires additional parameters to initailize
nCipher nFast cknfast.dll (WWW)
nShield cknfast.dll (WWW)
Nexus nxpkcs11.dll
OpenSC (multiple) opensc-pkcs11.dll (WWW) Free, open source library
Orga Micardo micardoPKCS11.dll
Rainbow CryptoSwift Accelerator Cryptoki22.dll
CryptoSwift HSM iveacryptoki.dll
Ikey 1000 cryptoki22.dll From wiki.cacert.org: for USB use Datakey driver
iKey 1000/1032 k1pk112.dll (WWW)
iKey 2000 series and for DataKey cards dkck201.dll
iKey 2000/2032 dkck232.dll (WWW)
iKey 2032 dkck201.dll
cryptoki22.dll From wiki.cacert.org: for USB use Datakey driver
Safelayer HSM p11card.dll From wiki.cacert.org: for USB use Datakey driver
Schlumberger Cryptoflex acpkcs.dll (WWW)
SecuTech Solution Inc. UniToken PRO utp11.dll (WWW) Their video only demonstrated importing keyfile to security token
Cryptoflex slbck.dll (WWW)
Cyberflex Access slbck.dll (WWW)
SeTec SeTokI cards SetTokI.dll Full path to library may be required, e.g.: C:\ Program Files\ Setec\ SetTokI\ SetTokI.dll
Siemens HiPath SIcurity Card siecap11.dll
Some Siemens Card OS cards eTpkcs11.dll
SmartTrust smartp11.dll
Spyrus SpyPK11.dll (WWW)
Utimaco Cryptoki for SafeGuard pkcs201n.dll
? ActivCard cards acpkcs.dll
ActivClient acpkcs211.dll
Datakey dkck201.dll From wiki.cacert.org: for Entrust
Datakey pkcs201n.dll
Datakey CIP dkck201.dll
Datakey/iKey dkck232.dll From wiki.cacert.org: NB: buggy, use 201
Fortezza Module fort32.dll
Oberthur AuthentIC AuCryptoki2-0.dll
SCW PKCS 3GI 3-G International 3gp11csp.dll
TeleSec pkcs11.dll

The information listed above was compiled from multiple sources, including: