confium_pkcs11_server/lib.rs
1//! PKCS#11 v3.0 server dispatching to Confium threshold protocol.
2//!
3//! This is the Mode 2 cornerstone. Exposes PKCS#11 v3.0 API (`C_Sign`,
4//! `C_Decrypt`, `C_GenerateKeyPair`, etc.) and internally dispatches
5//! to threshold protocol. Existing PKCS#11 consumers (OpenSSL, OpenSSH,
6//! Java KeyStore, nginx, Apache) work unchanged.
7//!
8//! The full PKCS#11 v3.0 surface is ~40+ functions. This crate provides
9//! the dispatch layer that routes calls to a quorum coordinator; the
10//! real PKCS#11 FFI shim is generated separately.
11//!
12//! See `TODO.roadmap/28-mode2-pki-replacement.md` for full spec.
13
14#![forbid(unsafe_code)]
15#![allow(missing_docs)] // TODO: document before 1.0
16
17pub mod dispatch;
18pub mod slot;
19pub mod token;
20
21pub use dispatch::*;
22pub use slot::*;
23pub use token::*;