Issues

• C_DigestKey digests a sensitive EC private key's CKA_VALUE: no check that the object is a secret key

  softhsm/SoftHSMv2#913 · Filter by author AlexLaroche opened on Oct 30, 2026

• C_Verify/C_Sign/C_Encrypt with CKM_RSA_X_509 and data longer than the modulus terminate the application (exit 5) instead of CKR_DATA_LEN_RANGE

  softhsm/SoftHSMv2#912 · Filter by author AlexLaroche opened on Oct 30, 2026

• Accept the raw CKA_EC_POINT for Edwards/Montgomery public keys (PKCS#11 v3.1+), not only the v3.0 DER form

  softhsm/SoftHSMv2#909 · Filter by author AlexLaroche opened on Oct 17, 2026

• A crash while softhsm2-util --import rewrites token.object leaves it empty, and the token with every key in it unreadable

  softhsm/SoftHSMv2#908 · Filter by author yottayoshida opened on Oct 9, 2026

• C_Sign(CKM_RSA_X_509) decrypts and unwraps with a sign-only key

  softhsm/SoftHSMv2#906 · Filter by author citypw opened on Oct 1, 2026 · 2.8.0

• memcpy from NULL in C_EncryptInit(GCM) and C_FindObjectsInit

  softhsm/SoftHSMv2#904 · Filter by author citypw opened on Sep 21, 2026 · 2.8.0
  2

• C_DestroyObject drops the handle before the token object is deleted

  softhsm/SoftHSMv2#903 · Filter by author citypw opened on Sep 18, 2026 · 2.8.0

• New tag / release

  softhsm/SoftHSMv2#902 · Filter by author Fluepke opened on Sep 17, 2026
  1

• CKM_ECDSA intermittently produces a well-formed but cryptographically invalid signature (~35-65% of calls, same key/digest)

  softhsm/SoftHSMv2#901 · Filter by author crow-004 opened on Sep 15, 2026 · 2.8.0

• C_Sign succeeds after C_Logout (cached privateKey / no resetOp)

  softhsm/SoftHSMv2#900 · Filter by author citypw opened on Sep 14, 2026 · 2.8.0

• ASAN reports memory leak when used with GnuTLS in Knot

  Bug

  softhsm/SoftHSMv2#896 · Filter by author Payne-X6 opened on Aug 28, 2026 · 2.8.0

• PKCS #11 3.1/3.2 conformance tests and scripting with XML

  Feature

  softhsm/SoftHSMv2#879 · Filter by author frankmorgner opened on Jun 3, 2026
  1

• RFC: Upstreaming CKM_HKDF_DERIVE — design questions

  Feature

  softhsm/SoftHSMv2#878 · Filter by author Hussainity opened on May 28, 2026
  3

• integrate (openbao/hashicorp) vault as storage backend for secret keys ...

  Feature

  softhsm/SoftHSMv2#877 · Filter by author smehrens opened on May 19, 2026
  2

• Missing support for ContextData (context strings) for EdDSA signatures

  Bug

  softhsm/SoftHSMv2#873 · Filter by author Jakuje opened on May 12, 2026 · 2.8.0
  1

• CBC supports wrap but not unwrap

  Feature

  softhsm/SoftHSMv2#856 · Filter by author Leont opened on Mar 26, 2026
  1

• db backend is missing the public exponent for private keys

  Bug

  softhsm/SoftHSMv2#847 · Filter by author gumulka opened on Feb 28, 2026 · 2.8.0
  2

• Intermittent SQLite transaction error on read operations (cannot start a transaction within a transaction)

  Bug

  softhsm/SoftHSMv2#845 · Filter by author msiemens opened on Feb 23, 2026

• AES-GCM tests failing with wycherproof in Fedora

  Bug

  softhsm/SoftHSMv2#844 · Filter by author Jakuje opened on Jan 26, 2026 · 2.8.0

• Add integration tests

  Feature

  softhsm/SoftHSMv2#843 · Filter by author Jakuje opened on Jan 26, 2026

• deadlock in softhsm2 when testing head of openssl

  Bug

  softhsm/SoftHSMv2#834 · Filter by author nhorman opened on Dec 27, 2025
  5

• SoftHSM returns invalid value for CKA_ALLOWED_MECHANISMS when there is no limitation

  Bug

  softhsm/SoftHSMv2#825 · Filter by author Jakuje opened on Nov 19, 2025
  1

• Wrong encoding of CKA_EC_POINT for Edwards curve kyes using OpenSSL

  softhsm/SoftHSMv2#824 · Filter by author SebastianSpeiser opened on Nov 11, 2025
  1

• Prohibited attribute was passed to key generation function (pkcs11: 0x10: CKR_ATTRIBUTE_READ_ONLY)

  softhsm/SoftHSMv2#819 · Filter by author bernbad89 opened on Sep 15, 2025
  1

• Possible PKCS#11 regression

  softhsm/SoftHSMv2#810 · Filter by author LawrenceHunter opened on Aug 19, 2025
  3