💻 🔑 ssh-agent for TPMs

Libraries to abstract aspects of working with TPMs for the purposes of attestation

🔑 TPM 2.0 plugin for age

TLSPROXY is a TLS termination proxy that provides automatic TLS encryption for various network services. It supports SSO, client authentication, and can act as a web server or reverse proxy.

Converged Security Suite for Intel & AMD platform security features

An implementation of the Enrollment over Secure Transport (EST) certificate enrollment protocol

SSH Certificate Authority with device attestation

An SSH agent for hardware backed keys on Windows

Toolkit to manage keys and certificates in TPM2 chips

gRPC service that leverages a remote or local HSM/TPM to encrypt Kubernetes data at-rest with KMS v2.

A Linux only tool for TPM interaction

linux-id is FIDO token implementation for Linux that protects the token keys using your system's TPM.

An experimental (but fully functional) Remote Attestation Engine and Applications for TPM2.0 based systems (cloud, edge, IoT etc)

The project has been moved to CC-API organization. For more information:

TPM 2.0 TSS keyfile library

Kubernetes TPM Device Plugin

An implementation of crypto.Signer and crypto.Decrypter for private keys resident on a TPM 2.0 device

An open-source TPM device-attest-01 CA server

AegisSovereignAI: The Cross-Ecosystem Trust Layer for the Distributed Enterprise. Verifiable Identity, Hardware-Rooted Integrity, and Sovereign AI Governance - from Silicon to Prompt. Unifying AI, Cloud-Native, and Decentralized architectures.

Jane Attestation Server