SRO PKCS11 – SSH Agent CNG
SRO PKCS11 – SSH Agent CNG n’effectue aucune opération cryptographique interne.
Le logiciel ne manipule jamais :
- le PIN
- les clés privées
- les secrets matériels
- les buffers cryptographiques sensibles
Toutes les opérations de sécurité (PIN, signature, protection des clés, UI sécurisée) sont entièrement gérées par Windows via CNG / KSP / minidriver.
L’agent agit uniquement comme un orchestrateur et ne contient aucun mécanisme cryptographique maison.
Le risque de vulnérabilité critique est donc faible par conception.
Si vous pensez avoir identifié :
- un comportement anormal
- un bug
- une vulnérabilité potentielle
- un problème d’isolation ou de forwarding
merci de le signaler de manière responsable à :
-----BEGIN PGP PUBLIC KEY BLOCK-----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=k+un
-----END PGP PUBLIC KEY BLOCK-----
Cette clé PGP est valide jusqu’en : 2029‑02‑22
Fingerprint : E786 61E0 1D01 1146 EF7C 21E0 413E 386D AA1F 7392
Pour faciliter l’analyse :
- ne pas publier publiquement avant un premier échange
- fournir une description claire du problème
- inclure, si possible, les étapes de reproduction
- préciser l’environnement (Windows, smartcard, mode service/userland)
Les informations transmises dans le cadre d’une divulgation responsable sont traitées de manière confidentielle et ne seront jamais partagées sans accord explicite.
Aucun délai de réponse n’est garanti : cette politique n’implique ni SLA, ni engagement contractuel.
Les vulnérabilités provenant de minidrivers tiers, du KSP Microsoft ou de Windows ne relèvent pas de cette politique et doivent être adressées aux fournisseurs concernés.
Merci de ne pas envoyer d’informations sensibles non chiffrées.
Utilisez la clé PGP fournie pour toute communication nécessitant un chiffrement de bout en bout.
Version S/MIME sur demande.
Cette politique couvre :
- le binaire officiel signé Authenticode
- le mode standalone
- le mode service + helper
- le module PKCS#11
- le listener WSL2
- l’intégration Pageant
Elle ne couvre pas :
- les versions modifiées ou recompilées
- les forks non officiels
- les environnements non Windows
- les minidrivers tiers (responsabilité du fournisseur)
Pour toute question liée à l’usage commercial ou à la conformité :
SRO PKCS11 – SSH Agent CNG
SRO PKCS11 – SSH Agent CNG does not handle any sensitive secrets.
The software never processes:
- PIN codes
- private keys
- hardware secrets
- raw cryptographic material
All security‑critical operations (PIN entry, key protection, signing, secure UI) are fully handled by Windows through CNG / KSP / smartcard minidrivers.
The agent acts solely as an orchestrator and implements no custom cryptography.
This architecture significantly reduces the likelihood of critical vulnerabilities.
If you believe you have identified:
- abnormal behavior
- a bug
- a potential vulnerability
- an isolation or forwarding issue
please report it responsibly to:
-----BEGIN PGP PUBLIC KEY BLOCK-----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=k+un
-----END PGP PUBLIC KEY BLOCK-----
This PGP key is valid until: 2029‑02‑22
Fingerprint: E786 61E0 1D01 1146 EF7C 21E0 413E 386D AA1F 7392
To assist with analysis:
- avoid public disclosure before initial contact
- provide a clear description of the issue
- include reproduction steps when possible
- specify the environment (Windows version, smartcard type, service/userland mode)
Information shared as part of a responsible disclosure is treated confidentially and will never be shared without explicit consent.
No response time is guaranteed: this policy implies no SLA and no contractual obligation.
Vulnerabilities originating from third‑party smartcard minidrivers, Microsoft’s KSP, or Windows itself are outside the scope of this policy and must be reported to the appropriate vendors.
Please do not send unencrypted sensitive information.
Use the provided PGP key for any communication requiring end‑to‑end encryption.
S/MIME version on demand.
Covered by this policy:
- the official Authenticode‑signed binary
- standalone mode
- service + helper mode
- PKCS#11 module
- WSL2 TCP listener
- Pageant integration
Not covered:
- modified or recompiled versions
- unofficial forks
- non‑Windows environments
- third‑party minidrivers (responsibility of the vendor)
For questions regarding commercial use or compliance: