Four bindings, one engine

Rust

Native Rust workspace — 43 crates spanning the engine, threshold protocols, PKI, storage, Mode 2 adapters, and transparency.

Docs source: github.com/confium/confium/tree/main/docs

Ruby

Native Ruby extension (magnus + rb-sys) wrapping the Confium engine. PKI, transparency, composite signatures, threshold crypto.

Docs source: github.com/confium/confium-ruby/tree/main/docs

Python

Native Python extension (PyO3) wrapping the Confium engine. Composite verify, transparency log, PKI parse, attributes DSL.

Docs source: github.com/confium/confium/tree/main/docs/bindings

WASM

Browser / Node.js verifier (wasm-bindgen). Composite signatures, transparency, attributes, X.509, CMS. Verifier-only — cannot sign.

CLI

The confium command-line tool — install plugins, manage trust, configure the local store.

Daemon

The confiumd long-running service — JSON-RPC over Unix socket or TCP for signing sessions and PKI operations.

PKCS#11 server

PKCS#11 v3.0 server — exposes Confium as a virtual HSM to existing PKCS#11 consumers.