This project is a toolkit for creating and managing X.509 certificate authorities, providing tools for the issuance, signing, and management of TLS certificates and private keys. It includes a command-line utility for generating certificate signing requests, bundling certificate chains, and parsing PEM or DER files. The system features an HTTP API server that allows for remote signing and verification of certificates using JSON requests and responses. This architecture supports automated certificate provisioning and includes a signing proxy to forward requests to remote backend services. The
This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital signatures, and secure authentication. It provides technical instructions for configuring hardware security modules to handle digital identity and cryptographic materials. The documentation focuses on the implementation of OpenPGP and SSH workflows, specifically covering the creation of master key hierarchies, the rotation of subkeys, and the use of hardware-backed keys for secure shell connections. It also details methods for verifying code authorship through signed Git commits and
JA4+ is a suite of network fingerprinting methods by FoxIO that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware…
News:
The main features of google/opensk are: Hardware and PKI Security.
Open-source alternatives to google/opensk include: cloudflare/cfssl — This project is a toolkit for creating and managing X.509 certificate authorities, providing tools for the issuance,… drduh/yubikey-guide — This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital… foxio-llc/ja4 — JA4+ is a suite of network fingerprinting methods by FoxIO that are easy to use and easy to share. These methods are… netflix/lemur — Lemur.
