This package contains a C library and command-line tools that make up the low-level development kit for the Yubico YubiKey authentication device.

This is an OpenSSL provider to access hardware and software tokens using the PKCS#11 cryptographic token interface. Access to tokens depends on loading an appropriate PKCS#11 driver that knows how to talk to the specific token. The PKCS#11 provider is a connector that allows OpenSSL to make proper use of such drivers.

YubiKey Manager (Qt) is a graphical application for configuring any YubiKey over all USB interfaces. For a CLI alternative, refer to the python-yubikey-manager package.

This package includes the IFD driver for the cyberJack contactless (RFID) and contact USB chipcard readers.

Yubikey-oath-demenu lets you pick an OATH credential from your YubiKey using dmenu, and copies the corresponding OTP to the clipboard. Alternatively, it can "type" the OTP using xdotool on X11.

Notable features:

• Pick between all credentials on all connected YubiKeys

• No mouse interaction required

This package provides a communication library for Nitrokey.

This Python library provides functionality for communicating with a Fast IDentity Online (FIDO) device over Universal Serial Bus (USB) as well as verifying attestation and assertion signatures. It aims to support the FIDO Universal 2nd Factor (U2F) and FIDO 2.0 protocols for communicating with a USB authenticator via the Client-to-Authenticator Protocol (CTAP 1 and 2). In addition to this low-level device access, classes defined in the fido2.client and fido2.server modules implement higher level operations which are useful when interfacing with an Authenticator, or when implementing a Relying Party.

YubiKey C Client Library (libykclient) is a C library used to validate a one-time-password (OTP) YubiKey against Yubico’s servers. See the Yubico website for more information about Yubico and the YubiKey.

The libsepol library provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, and programs such as load_policy, which must perform specific transformations on binary policies (for example, customizing policy boolean settings).

This package provides the tools "checkpolicy" and "checkmodule". Checkpolicy is a program that checks and compiles a SELinux security policy configuration into a binary representation that can be loaded into the kernel. Checkmodule is a program that checks and compiles a SELinux security policy module into a binary representation.

SETools is a collection of graphical tools, command-line tools, and libraries designed to facilitate SELinux policy analysis.

The SELinux CIL compiler is a compiler that converts the common intermediate language (CIL) into a kernel binary policy file.

The libselinux library provides an API for SELinux applications to get and set process and file security contexts, and to obtain security policy decisions. It is required for any applications that use the SELinux API, and used by all applications that are SELinux-aware. This package also includes the core SELinux management utilities.

The policycoreutils package contains the core utilities that are required for the basic operation of an SELinux-enabled GNU system and its policies. These utilities include load_policy to load policies, setfiles to label file systems, newrole to switch roles, and run_init to run service scripts in their proper context.

This package contains a Python module that forms the core of audit2allow, a part of the package policycoreutils. The sepolgen library contains: Reference Policy Representation, which are Objects for representing policies and the reference policy interfaces. It has objects and algorithms for representing access and sets of access in an abstract way and searching that access. It also has a parser for reference policy "headers". It contains infrastructure for parsing SELinux related messages as produced by the audit system. It has facilities for generating policy based on required access.

The libsemanage library provides an API for the manipulation of SELinux binary policies.

This package provides Sequoia's reimplementation of the GnuPG interface.

gpg-sq is Sequoia's alternative implementation of a tool following the GnuPG command line interface. It provides a drop-in but not feature-complete replacement for the GnuPG project's gpg.

This Guix package is built to use the nettle cryptographic library.

This package provides an implementation of OpenPGP's web of trust.

This Guix package is built to use the nettle cryptographic library.

This package provides the command-line frontend for Sequoia OpenPGP.

This Guix package is built to use the nettle cryptographic library and the gpg-agent, openpgp-card and softkeys keystore backends.

sqv verifies detached OpenPGP signatures. It is a replacement for gpgv. Unlike gpgv, it can take additional constraints on the signature into account.

This Guix package is built to use the nettle cryptographic library.

Sequoia is a new OpenPGP implementation, written in Rust, consisting of several Rust crates/packages. This Guix meta-package combines these packages into a single one for convenience. Anyhow, you should not depend other packages on this one avoid excessive compile-times for users.

This package provides two dump_to_string/dumps methods that returns YAML document as string.

Libmpack is a small binary serialization and RPC library that implements both the msgpack and msgpack-rpc specifications.

Valijson is a header-only JSON Schema validation library for C++11. It provides a simple validation API that allows loading JSON Schemas, and validate documents loaded by one of several supported parser libraries.