macOS
Homebrewverified · 100%
brew install gnupg-pkcs11-scdlocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install gnupg-pkcs11-scdMacPorts ports tree · security/gnupg-pkcs11-scd/Portfile · source: api.github.com
brew
Install gnupg-pkcs11-scd with Homebrew, apt, dnf, MacPorts, Nix
Enable the use of PKCS#11 tokens with GnuPG. Version 0.11.0 via Homebrew; verified from local package data.
install
Additional install commands
Linux
Debian aptverified · 92%
sudo apt install gnupg-pkcs11-scdDebian stable package indexes · gnupg-pkcs11-scd · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install gnupg-pkcs11-scdFedora Rawhide package metadata · gnupg-pkcs11-scd · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#gnupg-pkcs11-scdnixpkgs package indexes · pkgs/by-name/gn/gnupg-pkcs11-scd/package.nix · source: api.github.com
overview
Package summary
Enable the use of PKCS#11 tokens with GnuPG
Project links
Commands and aliases
- gnupg-pkcs11-scd
history
Project history and usage
gnupg-pkcs11-scd is a small GnuPG smart-card daemon replacement that lets GnuPG talk to cryptographic tokens through PKCS#11.
Project history
The project page describes gnupg-pkcs11 as an implementation of a BSD-licensed smart-card daemon for using PKCS#11 tokens with GnuPG. Its motivation came from GnuPG mailing-list discussions in 2004 and 2006 about PKCS#11 support and an unmaintained patch.
The README credits Zeljko Vrba and Alon Bar-Lev, with copyright years beginning in 2006. The SourceForge project page shows release activity for the 0.7, 0.8 and 0.9 series during 2017.
Adoption history
Adoption is specialized: the tool serves users who already manage keys in PKCS#11-compatible hardware tokens or smart cards and want those keys available to GnuPG through the scdaemon interface.
How it is used
Practitioners use it as a drop-in or near-drop-in scdaemon replacement for GnuPG, typically in setups involving OpenSC, vendor PKCS#11 modules, smart cards, hardware tokens or enterprise certificate devices.
Why package nerds care
The package matters in packaging ecosystems because it fills a narrow interoperability gap: GnuPG's OpenPGP tooling on one side, PKCS#11 token middleware on the other. That makes it useful for people who need hardware-backed signing or decryption without migrating keys into GnuPG's native smart-card path.
Timeline
- 2004: GnuPG mailing-list discussions raised PKCS#11 smart-card integration questions.
- 2006: Project copyright history began for the daemon implementation.
- 2017: The project page announced 0.7.6, 0.8.0 and 0.9.0 releases.
Related projects
- gnupg-pkcs11-scd sits between GnuPG, scdaemon, PKCS#11 providers and token stacks such as OpenSC or vendor-supplied modules.
Sources
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 8 platform targets.
- Installs with 5 runtime dependencies.
- Build metadata lists 4 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
gnupg-pkcs11-scd | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version0.11.0
manager updated
local dataok
upstreamnot checked
latest detectednot detected
https://github.com/alonbl/gnupg-pkcs11-scd
- infoNo package-manager update timestamp was available.low confidence
- infoNo cached GitHub release or tag data was available.https://github.com/alonbl/gnupg-pkcs11-scdnone confidence
install metadata
Package metadata
| Package key | brew:gnupg-pkcs11-scd |
|---|---|
| Version | 0.11.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/gnupg-pkcs11-scd |
| Homepage | https://gnupg-pkcs11.sourceforge.net/ |
| Repository | https://github.com/alonbl/gnupg-pkcs11-scd |
| Upstream docs | https://github.com/alonbl/gnupg-pkcs11-scd#readme |
| License | BSD-3-Clause |
| Source archive | https://github.com/alonbl/gnupg-pkcs11-scd/releases/download/gnupg-pkcs11-scd-0.11.0/gnupg-pkcs11-scd-0.11.0.tar.bz2 |
| Dependencies | libassuan, libgcrypt, libgpg-error, openssl@3, pkcs11-helper |
| Build dependencies | autoconf, automake, libtool, pkgconf |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | gnupg-pkcs11-scd |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
gnupg-pkcs11-scd 0.10.0-5+b1
GnuPG smart-card daemon with PKCS#11 support
http://gnupg-pkcs11.sourceforge.net/
sudo apt install gnupg-pkcs11-scd- Section: utils
- Architecture: amd64
- Source Package: gnupg-pkcs11-scd
- 6 dependencies
- 2 optional deps
- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
Debian apt95%
gnupg-pkcs11-scd-proxy 0.10.0-5+b1
GnuPG smart-card daemon with PKCS#11 support, proxy
http://gnupg-pkcs11.sourceforge.net/
sudo apt install gnupg-pkcs11-scd-proxy- Section: utils
- Architecture: amd64
- Source Package: gnupg-pkcs11-scd
- 2 dependencies
- 2 optional deps
- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
Nix95%
gnupg-pkcs11-scd
nix profile install nixpkgs#gnupg-pkcs11-scd- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
Ubuntu apt95%
gnupg-pkcs11-scd 0.10.0-3build2
GnuPG smart-card daemon with PKCS#11 support
http://gnupg-pkcs11.sourceforge.net/
sudo apt install gnupg-pkcs11-scd- Section: universe/utils
- Architecture: amd64
- 6 dependencies
- 2 optional deps
- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
Ubuntu apt95%
gnupg-pkcs11-scd-proxy 0.10.0-3build2
GnuPG smart-card daemon with PKCS#11 support, proxy
http://gnupg-pkcs11.sourceforge.net/
sudo apt install gnupg-pkcs11-scd-proxy- Section: universe/utils
- Architecture: amd64
- Source Package: gnupg-pkcs11-scd
- 2 dependencies
- 2 optional deps
- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
dnf95%
gnupg-pkcs11-scd 0.11.0-5.fc44
GnuPG-compatible smart-card daemon with PKCS#11 support
http://gnupg-pkcs11.sourceforge.net
sudo dnf install gnupg-pkcs11-scd- License: BSD-3-Clause
- Category: Unspecified
- Architecture: x86_64
- Source Package: gnupg-pkcs11-scd
- 9 dependencies
- 1 provides
- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
MacPorts95%
gnupg-pkcs11-scd
sudo port install gnupg-pkcs11-scd- normalized package name match
- Matched by: Gnupg Pkcs11 Scd
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment