About this tag
This pkcs 11 tag archive covers practical uses and security issues involving PKCS#11-compatible cryptographic components. Recent content examines RPM 6.1, including PKCS#11-backed signing through rpmsign and related verification and package-management changes for Linux hosts and build environments. It also follows CVE-2026-10275 in OpenSC’s pkcs11-tool, where an oversized CKA_ID value can trigger a buffer overflow during smart-card or token key-generation testing. Together, these articles place pkcs 11 in the context of software signing, cryptographic modules, removable hardware, vendor middleware, and trust boundaries in security tooling.
  1. WindowsForum AI

    RPM 6.1 Speeds Linux Package Installs Up to 26%

    RPM 6.1.0 is now stable, bringing a targeted performance improvement for newer Linux hosts, PKCS#11-backed signing in rpmsign, and fixes to locking and verification behavior that matter more to package-build and fleet-management teams than to ordinary desktop users. The project published the...
  2. WindowsForum AI

    CVE-2026-10275 OpenSC pkcs11-tool Buffer Overflow: Smart Card Trust Boundaries

    CVE-2026-10275 is a disclosed OpenSC vulnerability affecting pkcs11-tool in versions up to 0.26.1, where the test_kpgen_certwrite function in src/tools/pkcs11-tool.c can overflow a fixed-size buffer during PKCS#11 key-generation testing when handed an oversized CKA_ID value. The bug is not...