pdf-rfc3161
PDF document timestamps
Create and verify RFC 3161 timestamps in PDFs, including incremental document updates.
A document timestamp is distinct from an author signature. Trust and request binding need checks in the chosen integration.
Engineering tools & public work
Open-source projects for cryptographic software and Linux systems, alongside free tools for exploring embedded architectures.
Cryptographic software
pkcs11-proxy-ng
Remote PKCS#11 access
A Rust shim and daemon connecting an application to a remote PKCS#11 provider.
Designed for one logical client/trust domain. Release and development capabilities differ; check the selected version.
p11scope
PKCS#11 workload observation
Observe calls, mechanisms, errors, latency and provider dependencies on Linux without interposing.
Coverage depends on the exercised workload and supported observation mode.
pkcs11-check
PKCS#11 compatibility checks
Reproduce and compare provider behavior with negative tests, security checks and test vectors.
Results need engineering interpretation. They do not establish certification or prove a vendor vulnerability.
p11lab
Repeatable provider environments
Pinned provider sources, build recipes and lifecycle adapters for application and integration testing.
Separate P11Lab project and organization. Alpha provider images have documented coverage gaps; see its current provider status.
Linux diagnostic tooling
osslscope
OpenSSL provider diagnostics
Investigate which OpenSSL provider callbacks execute during a Linux workload.
Discovery preview with partial coverage. Callback entry alone does not establish successful cryptographic operations.
kryprobe
Linux kernel crypto observation
Capture kernel cryptographic paths with workload attribution, coverage and integrity accounting.
Supported capture profiles have explicit limits. Selection, execution, completion and success are separate observations.
memveil
Memory-path investigation
Observe Linux swiotlb bounce-buffer activity and analyze captures offline.
Specialist research on narrow profiles. Observed attempts do not prove successful DMA or confidential-memory qualification.
Each project has its own license, contribution and reporting guidance. For help with a particular application or environment, discuss an engineering task. Project links do not promise commercial support for every configuration.
Embedded assessment tools
Regulatory Liability Index
Explore illustrative administrative fine ceilings under EU CRA, AI Act, NIS2, and UK PSTI. Applicability needs separate review.
EU + UK Regulations
Open CalculatorCRA Classification Tool
Explore product categories and conformity-assessment routes under the Cyber Resilience Act.
CRA Annexes III & IV
Explore CategoriesThe Digital Auditor
Answer architecture questions about boot, updates, keys and device lifecycle to get a preliminary risk view. The report and PDF are free.
EcoTherm
ConsumerConsumer smart thermostat with AI-powered scheduling and occupancy detection.
GridForge
IndustrialIndustrial edge gateway for factory digital twins and predictive analytics.
SecurePay
FinanceCountertop POS terminal for small retailers with NFC, chip reader, QR camera,...
Regulatory Timeline
Key dates across CRA, RED, AI Act, NIS2, and adjacent regimes.
Enforcement Horizon
Mar 2025
PCI DSS 4.0
Payment Systems
Active
Aug 2025
EU RED Art 3.3
Wireless Devices
Active
Aug 2026
EU AI Act
High-Risk Systems
Enforcement 2026
Dec 2027
EU CRA
Market Ban
Full Enforcement 2027
For boot, device identity, protected keys and attestation policy, discuss embedded security & trusted computing. The assessment is based on supplied answers, not measured runtime or attestation evidence.