FreeHSM

An open-source PKCS#11 v3.2 cryptographic module, built to FIPS 140-3 Level 1 and CC EAL4+ requirements and documented with their methodologies. Not certified — the evaluation documents are published as worked examples.

FreeHSM is the PKCS#11 library, stewarded by Simorgh Labs. PKI and signing tooling on top of it is planned, not built.

• Source : https://github.com/afchine1337/freehsm
• Latest release : v1.4.0
• Security policy : SECURITY.md
• License : Apache-2.0

Repository renamed from freehsm-c to freehsm in July 2026 — old URLs redirect automatically.

Blog

• 2026-08-02 — Count the paths: seven defects, one shape
• 2026-07-18 — FreeHSM v1.5.0: the integrity self-test that never ran
• 2026-07-16 — Simorgh Labs, FreeHSM, and a marketing claim we killed ourselves
• 2026-06-28 — FreeHSM C v1.2.2 → v1.3.0: The methodology meets an external reporter

Documentation

• Documentation index (bilingual EN/FR, mapped to CC classes)
• CHANGELOG
• FIPS 140-3 Security Target
• Security Advisories