AWS CloudHSM KSP5.18.0
The AWS CloudHSM client for Windows includes CNG and KSP providers.
v5.18.0
This title isn't mirrored on MirrorNest — see how we source software for why. The button above goes straight to the official publisher.
About
Windows applications can use AWS CloudHSM KSP to generate cryptographic keys, create signatures, and verify signatures through AWS CloudHSM. Published by Amazon Web Services, it supplies the CNG and KSP providers that connect Windows cryptographic operations with CloudHSM.
The x64 software runs on Windows and integrates with applications that use the Cryptography API: Next Generation or Key Storage Provider interfaces. Its CloudHSM CLI can generate ML-DSA-44, ML-DSA-65, and ML-DSA-87 key pairs, then sign and verify data with those keys. The CLI also supports PureEdDSA signing and verification using Ed25519.
The included PKCS #11 library adds ML-DSA key generation, signing, and verification, along with EdDSA signing for Ed25519 and Ed25519ph. Version 5.18.0 introduces ML-DSA, the FIPS 204 post-quantum digital signature algorithm, and EdDSA operations across the supported components. The broader Client SDK release also adds Ubuntu 26.04 LTS support.
This software is intended for Windows developers and administrators integrating hardware-backed CloudHSM cryptography into enterprise applications, signing services, and key-management workflows. Client SDK 5 is supported for production use and provides the same components and support level as Client SDK 3. AWS supports up to three prior minor SDK versions and one year from an SDK release date, while subsequent releases provide new capabilities plus security, stability, and performance fixes.
Architecture: x64
What's new in v5.18.0
Client SDK 5.18.0 introduces new features and improvements across multiple components, including post-quantum ML-DSA signatures and EdDSA support. Platform support - Added Ubuntu 26.04 LTS support. New Features - Added support for ML-DSA (Module-Lattice-Based Digital Signature Algorithm, FIPS 204) post-quantum key generation, signing, and verification. - Added support for EdDSA (Edwards-curve Digital Signature Algorithm) signing and verification. CloudHSM CLI - Added support for generating ML-DSA key pairs (ML-DSA-44, ML-DSA-65, and ML-DSA-87), signing, and verification. For more information, see Generate an asymmetric ML-DSA key pair with CloudHSM CLI, Generate a signature with the ML-DSA mechanism in CloudHSM CLI, and Verify a signature signed with the ML-DSA mechanism in CloudHSM CLI. - Added PureEdDSA (Ed25519) signing and verification, extending EdDSA support in the CloudHSM CLI. For more information, see Generate a signature with the PureEdDSA mechanism in CloudHSM CLI and Verify a signature signed with the PureEdDSA mechanism in CloudHSM CLI. PKCS #11 library - Added support for ML-DSA key generation, signing, and verification, and for EdDSA (Ed25519 and Ed25519ph) signing and verification. For more information, see Supported mechanisms for the PKCS #11 library for AWS CloudHSM Client SDK 5. JCE provider - Added support for ML-DSA key generation, signing, and verification, and for EdDSA (Ed25519 and Ed25519ph). For more information, see Supported mechanisms for JCE provider for AWS CloudHSM Client SDK 5. OpenSSL Provider - Added support for PureEdDSA (Ed25519) and ML-DSA (ML-DSA-44, ML-DSA-65, and ML-DSA-87) key types for TLS offload on non-FIPS clusters. For more information, see Supported key types for OpenSSL Provider for AWS CloudHSM Client SDK 5 and OpenSSL Provider Supported Mechanisms. - The OpenSSL Provider now supports OpenSSL CLI operations, including certificate signing request (CSR) creation and certificate signing, for all supported key types. Bug fixes/Improvements - Resolved a known issue where the key-reference filter could not select session (ephemeral) keys in the CloudHSM CLI and JCE provider. - Improved throttling handling and automatic retry behavior across the Client SDKs, along with additional bug fixes and stability improvements.
Details
Does this still work for you?
Reviews
No reviews yet — be the first.
AWS CloudHSM KSP alternatives
dotMemory Unit Standalone Launcher
Effective memory usage in .NET applications with dotMemory Unit
GamebarHandler
Gets rid of those pesky 'open ms-gamebar' and 'open ms-gamingoverlay' popups.
ShareX
ShareX is a free and open-source application that enables users to capture or record any area of their screen with a single keystroke. It also supports uploading images, text, and various file types to a wide range of destinations.
cerebro-es (Install)
elasticsearch web admin tool
CPUID CPU-Z
System information software
Vantage
Vantage