LibreCrypt: Open-Source disk encryption for Windows
If you have a token which supports the PKCS#11 standard, as most do, your token can be used by LibreCrypt. Below is a list of well known smartcards/tokens which do support this standard, and the suggested library filename to use.
Please note that:
If you are using a token which isn't mentioned on the list below, please check with your token supplier as to what to enter, and get in touch to have it added to the list.
Manufacturer | Device | Library | web site | Notes |
---|---|---|---|---|
ACS | ACOS5 smartcards | acospkcs11.dll | For use with ACOS5 smartcards. ACOS5 smartcards unable to create data objects, and contain no mechanisms for creating secret keys (except public/private keypairs) | |
AET | Rainbow iKey 3000 series and G&D StarCos 2.3 SPK cards | aetpkss1.dll | (WWW) | aka StarSign Middleware. Also installs PKCS#11 drivers aetpksse.dll (Entrust PKCS#11 lib) and aetpkssw.dll (PKCS #11 library wrapper that detects the need for automatic login on aetpkss1.dll) |
Aladdin | eToken PRO | etpkcs11.dll | (WWW) | Confirmed working with LibreCrypt |
eToken R2 | etpkcs11.dll | (WWW) | ||
Algorithmic Research | MiniKey | sadaptor.dll | ||
Aloaha | Smart Card Connector | aloahapkcs11.dll | (WWW) | Not fully tested, but from initial checks, this library appears _badly broken - it reports tokens present when no card reader is installed. When creating data objects on the phantom token, it reports that the objects were successfully created, but doesn't actually do anything! Possible that it works correctly if both hardware and token present? |
A-Sign | A-Sign premium cards | psepkcs11.dll | Reputedly v1.0 of this library is incomplete and has many bugs?? | |
Athena | Athena Smartcard System ASE Card | asepkcs.dll | ||
A-Trust | a-sign | asignp11.dll | (WWW) | |
Belgian Government | Belgian Electronic Identity (eID) Card | Belgium Identity Card PKCS11.dll | ||
Chrysalis | cryst32.dll | (WWW) | web site no longer exists | |
LUNA | cryst201.dll | (WWW) | web site no longer exists | |
Dallas Semiconductors | iButton | dspkcs.dll | ||
Eracom | (hardware) | cryptoki.dll | Full path to library may be required, e.g: C:\ Program Files\ ERACOM\ Cprov SDK\ bin\ csa\ cryptoki.dll On 1st December2005 Eracom Technologies AG was acquired by SafeNet | |
(software emulation) | cryptoki.dll | Full path to library may be required, e.g.: C:\ Program Files\ ERACOM\ Cprov SDK\ bin\ sw\ cryptoki.dll On 1st December2005 Eracom Technologies AG was acquired by SafeNet | ||
Estonian Government | Estonian Electronic Identity (eID) Card | opensc-pkcs11.dll | ||
Eutron | Crypto Identity | sadaptor.dll | (WWW) | |
Feitain technologys Co.,Ltd | ePass 1000 | EP1PK111.DLL | (WWW) | |
ePass 2000 | ep2pk11.dll | (WWW) | ||
ePass 2000FT11 | ngp11v211.dll | (WWW) | Confirmed working with LibreCrypt | |
ePass 3000 | ngp11v211.dll | (WWW) | ||
ePass 3003 | ShuttleCsp113003.dll | (WWW) | Confirmed working with LibreCrypt | |
Gemplus | gclib.dll | |||
pk2priv.dll | ||||
GemPlus/GemSoft | GemPlus/GemSoft Smartcard | w32pk2ig.dll | ||
GemSafe | gclib.dll | GemSafe new version | ||
pk2priv.dll | GemSafe old version | |||
IBM | IBM 4758 | cryptoki.dll | ||
IBM Digital Signature for the Internet (DSI) for MFC cards | CccSigIT.dll | |||
IBM Embededded Security Subsystem | csspkcs11.dll | |||
IBM Netfinity PSG Chip1 | ibmpkcss.dll | |||
IBM SecureWay Smartcard | w32pk2ig.dll | |||
cryptoki.dll | ||||
ID2 | id2cbox.dll | Full path to library may be required, e.g.: C:\ Data\ Development\ SmartCardIntegration\ PKCS11wrapper\ JavaToPKCS11\ demo\ test\ old\ id2cbox.dll | ||
Mozilla/Netscape | Mozilla or Netscape crypto module | softokn3.dll | Cannot be used with LibreCrypt; requires additional parameters to initailize | |
nCipher | nFast | cknfast.dll | (WWW) | |
nShield | cknfast.dll | (WWW) | ||
Nexus | nxpkcs11.dll | |||
OpenSC | (multiple) | opensc-pkcs11.dll | (WWW) | Free, open source library |
Orga Micardo | micardoPKCS11.dll | |||
Rainbow | CryptoSwift Accelerator | Cryptoki22.dll | ||
CryptoSwift HSM | iveacryptoki.dll | |||
Ikey 1000 | cryptoki22.dll | From wiki.cacert.org: for USB use Datakey driver | ||
iKey 1000/1032 | k1pk112.dll | (WWW) | ||
iKey 2000 series and for DataKey cards | dkck201.dll | |||
iKey 2000/2032 | dkck232.dll | (WWW) | ||
iKey 2032 | dkck201.dll | |||
cryptoki22.dll | From wiki.cacert.org: for USB use Datakey driver | |||
Safelayer | HSM | p11card.dll | From wiki.cacert.org: for USB use Datakey driver | |
Schlumberger | Cryptoflex | acpkcs.dll | (WWW) | |
SecuTech Solution Inc. | UniToken PRO | utp11.dll | (WWW) | Their video only demonstrated importing keyfile to security token |
Cryptoflex | slbck.dll | (WWW) | ||
Cyberflex Access | slbck.dll | (WWW) | ||
SeTec | SeTokI cards | SetTokI.dll | Full path to library may be required, e.g.: C:\ Program Files\ Setec\ SetTokI\ SetTokI.dll | |
Siemens | HiPath SIcurity Card | siecap11.dll | ||
Some Siemens Card OS cards | eTpkcs11.dll | |||
SmartTrust | smartp11.dll | |||
Spyrus | SpyPK11.dll | (WWW) | ||
Utimaco | Cryptoki for SafeGuard | pkcs201n.dll | ||
? | ActivCard cards | acpkcs.dll | ||
ActivClient | acpkcs211.dll | |||
Datakey | dkck201.dll | From wiki.cacert.org: for Entrust | ||
Datakey | pkcs201n.dll | |||
Datakey CIP | dkck201.dll | |||
Datakey/iKey | dkck232.dll | From wiki.cacert.org: NB: buggy, use 201 | ||
Fortezza Module | fort32.dll | |||
Oberthur AuthentIC | AuCryptoki2-0.dll | |||
SCW PKCS 3GI 3-G International | 3gp11csp.dll | |||
TeleSec | pkcs11.dll |
The information listed above was compiled from multiple sources, including: