Issues

• C_UnwrapKey rejects valid PKCS#8: PrivateKeyInfo tags attributes [1] EXPLICIT and has no RFC 5958 publicKey

  latchset/kryoptic#532 · Filter by author AlexLaroche opened on Oct 17, 2026

• C_SignFinal without C_SignUpdate fails with CKR_OPERATION_NOT_INITIALIZED but leaves the operation active

  latchset/kryoptic#531 · Filter by author aehrisch opened on Oct 14, 2026

• C_Verify failing with CKR_SIGNATURE_LEN_RANGE leaves the verification operation active

  latchset/kryoptic#530 · Filter by author aehrisch opened on Oct 14, 2026

• Wrapped EdDSA/XDH private keys are not RFC 8410 PKCS#8 (missing CurvePrivateKey OCTET STRING)

  latchset/kryoptic#527 · Filter by author AlexLaroche opened on Oct 14, 2026

• CKM_EXTRACT_KEY_FROM_KEY: wrong key value for byte-aligned bit indexes

  latchset/kryoptic#526 · Filter by author aehrisch opened on Oct 10, 2026

• CKM_AES_CBC_ENCRYPT_DATA derives with an IV other than the one passed in

  latchset/kryoptic#525 · Filter by author aehrisch opened on Oct 10, 2026

• CKM_AES_CTS: C_Encrypt/C_Decrypt fail with CKR_DEVICE_ERROR into a buffer of the announced size

  latchset/kryoptic#524 · Filter by author aehrisch opened on Oct 10, 2026
  1

• split ossl crate to a separate repo?

  deferred
  latchset/kryoptic#467 · Filter by author cgwalters opened on Jun 24, 2026
  1

• Consider implementing X509 Attribute certificates: CKC_X_509_ATTR_CERT

  latchset/kryoptic#451 · Filter by author simo5 opened on May 7, 2026

• Add support to use C_[En|De]capsulateKey with ECC and RSA as well

  enhancementgood first issue
  Feature

  latchset/kryoptic#432 · Filter by author simo5 opened on Mar 25, 2026 · 1.6

• Implement key export using ML-KEM for wrapping for as many key types as possible

  deferred
  Feature

  latchset/kryoptic#424 · Filter by author simo5 opened on Feb 26, 2026 · 1.6

• C_Initialize could return CKR_USER_PIN_NOT_INITIALIZED

  deferred
  latchset/kryoptic#391 · Filter by author Jakuje opened on Jan 7, 2026
  11

• The CKA_PUBLIC_KEY_INFO should report the RSA-PSS algorithm ID for RSA keys with RSA-PSS restricted CKA_ALLOWED_MECHANISMS

  latchset/kryoptic#370 · Filter by author Jakuje opened on Nov 20, 2025
  1

• Kryoptic should probably load the default openssl config

  enhancement
  Feature

  latchset/kryoptic#319 · Filter by author simo5 opened on Sep 9, 2025
  17

  

• Consolidate all fips testing in a single file

  enhancementfips
  Task

  latchset/kryoptic#288 · Filter by author simo5 opened on Jun 30, 2025
  1

• Run pbkdf tests with different PRFs

  enhancementhelp wantedtests
  Task

  latchset/kryoptic#277 · Filter by author beldmit opened on Jun 24, 2025

• Windows support

  latchset/kryoptic#250 · Filter by author ivozeba opened on May 24, 2025
  7

• Add support for SHAKE hashes

  deferredenhancement
  latchset/kryoptic#211 · Filter by author simo5 opened on Apr 17, 2025
  1

• Add way to disable SHA1-signatures entirely

  enhancement
  latchset/kryoptic#181 · Filter by author simo5 opened on Mar 13, 2025
  1

  

• Create a sqlite storage inspector or dbdump to allow inspection of DB

  deferred
  latchset/kryoptic#33 · Filter by author Jakuje opened on Apr 8, 2024

• Support for private keys that do not need login

  deferred
  latchset/kryoptic#22 · Filter by author Jakuje opened on Mar 26, 2024
  5