fmcrypto service

a cryptographic and pki service built with FastAPI for secure key management, encryption, and certificate operations.

overview

fmcrypto service provides two main services:

• crypto service : key generation, encryption, digital signatures, mac operations, pin translation, and key wrapping
• pki service : certificate generation, renewal, csr processing, and crl management

quick start

development

cd deployment
./run_dev.sh

production

cd deployment
./run_prod.sh

testing

cd testing
./run_tests.sh

requirements

• python 3.13+
• docker and docker compose
• pytest and pytest-cov

env variables

• HSM_IP - hsm server ip address
• HSM_PORT - hsm server port (default: 1234)
• CRYPTO_HSM - hsm type (default: GP)
• ENVIRONMENT - env setting

3rd-party components

the aes dukpt implementation in common/utils/sw/dukpt.py is based on the reference implementation provided by the Accredited Standards Committee X9 (ASC X9) for ANSI X9.24-3-2017.

for complete licensing information, see LICENSES.md.

license

this project is licensed under the MIT License - see the LICENSE file for details.