FreeOTFE logo FreeOTFE
Free disk encryption software for PCs and PDAs
(PDA version of WWW site)

Appendix E: PKCS#11 Driver Libraries

If you have a token which supports the PKCS#11 standard, as most do, your token can be used by FreeOTFE. Below is a list of well known smartcards/tokens which do support this standard, and the suggested library filename to use.

Please note that:

  1. Token manufacturers may change their driver filenames without notice; check with your supplier if the information listed below doesn't work.
  2. This list is not exhaustive - many more tokens are supported than are listed here.

If you are using a token which isn't mentioned on the list below, please check with your token supplier as to what to enter, and get in touch to have it added to the list.

Manufacturer Device Library WWW Site Notes
ACS ACOS5 smartcards acospkcs11.dll   For use with ACOS5 smartcards. ACOS5 smartcards unable to create data objects, and contain no mechanisms for creating secret keys (except public/private keypairs)
AET Rainbow iKey 3000 series and G&D StarCos 2.3 SPK cards aetpkss1.dll (WWW) aka StarSign Middleware. Also installs PKCS#11 drivers aetpksse.dll (Entrust PKCS#11 lib) and aetpkssw.dll (PKCS #11 library wrapper that detects the need for automatic login on aetpkss1.dll)
Aladdin eToken PRO etpkcs11.dll (WWW) Confirmed working with FreeOTFE
eToken R2 etpkcs11.dll (WWW)  
Algorithmic Research MiniKey sadaptor.dll    
Aloaha Smart Card Connector aloaha_pkcs11.dll (WWW) Not fully tested, but from initial checks, this library appears badly broken - it reports tokens present when no card reader is installed. When creating data objects on the phantom token, it reports that the objects were successfully created, but doesn't actually do anything! Possible that it works correctly if both hardware and token present?
A-Sign A-Sign premium cards psepkcs11.dll   Reputedly v1.0 of this library is incomplete and has many bugs??
Athena Athena Smartcard System ASE Card asepkcs.dll    
A-Trust a-sign asignp11.dll (WWW)  
Belgian Government Belgian Electronic Identity (eID) Card Belgium Identity Card PKCS11.dll    
Chrysalis   cryst32.dll (WWW) WWW site no longer exists
LUNA cryst201.dll (WWW) WWW site no longer exists
Dallas Semiconductors iButton dspkcs.dll    
Eracom (hardware) cryptoki.dll   Full path to library may be required, e.g:
C:\ Program Files\ ERACOM\ Cprov SDK\ bin\ csa\ cryptoki.dll
On 1st December2005 Eracom Technologies AG was acquired by SafeNet
(software emulation) cryptoki.dll   Full path to library may be required, e.g.:
C:\ Program Files\ ERACOM\ Cprov SDK\ bin\ sw\ cryptoki.dll
On 1st December2005 Eracom Technologies AG was acquired by SafeNet
Estonian Government Estonian Electronic Identity (eID) Card opensc-pkcs11.dll    
Eutron Crypto Identity sadaptor.dll (WWW)  
Feitain technologys Co.,Ltd ePass 1000 EP1PK111.DLL (WWW)  
ePass 2000 ep2pk11.dll (WWW)  
ePass 2000_FT11 ngp11v211.dll (WWW) Confirmed working with FreeOTFE
ePass 3000 ngp11v211.dll (WWW)  
ePass 3003 ShuttleCsp11_3003.dll (WWW) Confirmed working with FreeOTFE
Gemplus   gclib.dll    
  pk2priv.dll    
GemPlus/GemSoft GemPlus/GemSoft Smartcard w32pk2ig.dll    
GemSafe   gclib.dll   GemSafe new version
  pk2priv.dll   GemSafe old version
IBM IBM 4758 cryptoki.dll    
IBM Digital Signature for the Internet (DSI) for MFC cards CccSigIT.dll    
IBM Embededded Security Subsystem csspkcs11.dll    
IBM Netfinity PSG Chip1 ibmpkcss.dll    
IBM SecureWay Smartcard w32pk2ig.dll    
  cryptoki.dll    
ID2   id2cbox.dll   Full path to library may be required, e.g.:
C:\ Data\ Development\ SmartCardIntegration\ PKCS11wrapper\ JavaToPKCS11\ demo\ test\ old\ id2cbox.dll
Mozilla/Netscape Mozilla or Netscape crypto module softokn3.dll   Cannot be used with FreeOTFE; requires additional parameters to initailize
nCipher nFast cknfast.dll (WWW)  
nShield cknfast.dll (WWW)  
Nexus   nxpkcs11.dll    
OpenSC (multiple) opensc-pkcs11.dll (WWW) Free, open source library
Orga Micardo   micardoPKCS11.dll    
Rainbow CryptoSwift Accelerator Cryptoki22.dll    
CryptoSwift HSM iveacryptoki.dll    
Ikey 1000 cryptoki22.dll   From wiki.cacert.org: for USB use Datakey driver
iKey 1000/1032 k1pk112.dll (WWW)  
iKey 2000 series and for DataKey cards dkck201.dll    
iKey 2000/2032 dkck232.dll (WWW)  
iKey 2032 dkck201.dll    
  cryptoki22.dll   From wiki.cacert.org: for USB use Datakey driver
Safelayer HSM p11card.dll   From wiki.cacert.org: for USB use Datakey driver
Schlumberger Cryptoflex acpkcs.dll (WWW)  
Cryptoflex slbck.dll (WWW)  
Cyberflex Access slbck.dll (WWW)  
SeTec SeTokI cards SetTokI.dll   Full path to library may be required, e.g.:
C:\ Program Files\ Setec\ SetTokI\ SetTokI.dll
Siemens HiPath SIcurity Card siecap11.dll    
Some Siemens Card OS cards eTpkcs11.dll    
SmartTrust   smartp11.dll    
Spyrus   SpyPK11.dll (WWW)  
Utimaco Cryptoki for SafeGuard pkcs201n.dll    
? ActivCard cards acpkcs.dll    
ActivClient acpkcs211.dll    
Datakey dkck201.dll   From wiki.cacert.org: for Entrust
Datakey pkcs201n.dll    
Datakey CIP dkck201.dll    
Datakey/iKey dkck232.dll   From wiki.cacert.org: NB: buggy, use 201
Fortezza Module fort32.dll    
Oberthur AuthentIC AuCryptoki2-0.dll    
SCW PKCS 3GI 3-G International 3gp11csp.dll    
TeleSec pkcs11.dll    

The information listed above was compiled from multiple sources, including: