SoftHSM

SoftHSM is a cryptographic store that supports the PKCS#11 interface, which can be used to inspect PKCS#11 without the need for a Hardware Security Module. This software is an integral part of the OpenDNSSEC project and conducts its cryptographic operations using Botan.

OpenDNSSEC uses the PKCS#11 interface to manage and store its cryptographic keys. This interface offers a means of communicating with cryptographic devices like HSMs and smart cards. These devices are intended to generate cryptographic keys, sign information and keep the private key information secure from external sources. They are generally efficient in performing specific cryptographic tasks as compared to other processes in a computer.

The implementation of PKCS#11 interface can limit the widespread adoption of OpenDNSSEC, as a potential user may be unwilling to invest in new hardware. To alleviate this concern, OpenDNSSEC has created a software implementation of a generic cryptographic device with a PKCS#11 interface, SoftHSM. SoftHSM is tailored to fit the OpenDNSSEC project requirements but can integrate with other cryptographic products due to its PKCS#11 interface.