If you mean in general, there are lots of vendors, including (vendor: product):

Utimaco: CryptoServer
Thales: Luna
Entrust: nCipher
Securosys: Primus
ATOS (Eviden): Trustway Proteccio
FutureX: CryptoHub
SoftHSM: SoftHSM2 (software emulation, for PKCS#11 testing/validation)

...and lots more. There are cheap Chinese vendors that are of questionable 
trustability (is that a word?).

The list above all do PKCS#11; Utimaco Atalla AT1000 and Entrust nCipher also 
have their own proprietary protocols, and Atalla does not do PKCS#11 at all. 
Atalla is focused on Payments processing.

Like most standards, PKCS#11 is a framework and "software x supports PKCS#11" 
does not mean "...and therefore software x will work with every PKCS#11 HSM". 
This is partly because of optional HSM services, but mostly because of 
configuration and auth (authorization/authentication) variations between 
implementations.

Does this help?

...phsiii

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Radoslaw Skorupka
Sent: Sunday, July 26, 2026 8:26 AM
To: [email protected]
Subject: HSM units vendors

In reference to the recent discussion about cryptography, a question occurred 
to me:
what are current HSM vendors?
Obviously IBM and CryptoExpress family (also available on distributed systems 
as PCIe card).
Thales series 10000 (previously Racal, AFAIR) ...
what else?

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to