A developer-friendly software simulator for HSM and smartcard with PKCS#11, REST API, and web UI for testing cryptographic applications.
Bouncy Hsm is a software simulator for Hardware Security Modules (HSM) and smart cards that provides a PKCS#11 interface, REST API, and web UI. It enables developers to test and develop applications that rely on cryptographic hardware tokens without needing physical devices. The project solves the problem of unreliable or complex HSM simulators by offering a developer-friendly, cross-platform alternative.
Developers and testers working on applications that use PKCS#11 interfaces for cryptographic operations, such as those building secure authentication systems, digital signature solutions, or certificate management tools.
Developers choose Bouncy Hsm for its broad algorithm support, ease of use via web and REST interfaces, and reliability as an alternative to SoftHSMv2. Its dependency-free native library and cross-platform compatibility reduce setup complexity and ensure consistent testing environments.
Bouncy Hsm is a software simulator of HSM and smartcard simulator with HTML UI, REST API and PKCS#11 interface.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports RSA up to 6K, elliptic curves, post-quantum algorithms like ML-DSA, and modern ciphers such as ChaCha20, enabling comprehensive cryptographic testing across diverse use cases.
Runs on all .NET 10.0 supported platforms including Windows, Linux, and Raspberry Pi, with a dependency-free native PKCS#11 library that ensures consistent behavior across environments.
Provides a web UI, REST API, and CLI for easy management of slots and objects, plus a NuGet package (BouncyHsm.Client) for streamlined unit testing of PKCS#11 applications.
Simulates smart cards with qualified areas, protected authentication paths, and removable tokens, offering realistic testing scenarios for compliance and development needs.
Explicitly stated as unsuitable for production data due to lack of data and key protection in storage and network calls, limiting it to development and testing only.
Cannot provide hardware-level security features like tamper resistance or secure key storage, making it inadequate for environments requiring physical security assurances.
As a software simulator, cryptographic operations may be slower compared to dedicated hardware HSMs, potentially affecting testing in high-load scenarios.
Being a newer alternative to SoftHSMv2, it has a smaller community and fewer third-party integrations, which could impact support and tooling availability.
BouncyHSM is an open-source alternative to the following products: