Caml-Crush is an OCaml PKCS#11 filtering proxy that has been presented at CARDIS 2014. The corresponding extended article can be found here. The main purpose of the Caml-Crush project is to provide a dynamic protection of the cryptographic tokens against known PKCS#11 API weaknesses using a flexible and extensible filtering rules engine.
Caml-Crush has been originally developed at ANSSI, but new releases are not provided by the agency anymore. Active developers took the project in charge.
Therefore, anyone who wishes to get upstream versions of the project must visit https://github.com/caml-pkcs11/caml-crush as this page now only serves archive purposes.
ANSSI is providing all the previous stables versions of Caml Crush as archives on this website.
The following historic stable versions are available here:
- 1.0.8
- Older: 1.0.0-1.0.7