Cryptsoft KMIP Server vs KeyRack

Cryptsoft KMIP Server is a C and Java SDK for developers adding key-management server capability to their own products. The SDK supports KMIP versions 1.0 through 2.1, with KMIP 3.0 support also listed, and Cryptsoft describes it as OASIS KMIP compliant. The company says its SDKs connect with HSMs, key-management servers, cloud services, storage and embedded devices, and support HSM integration and policy control. Keyward is a rebrandable web console for the server; it offers two layouts, theming, passkey sign-in and nine languages, and communicates over native KMIP or REST. Cryptsoft says KMIP 3.0 supports ML-KEM, ML-DSA and SLH-DSA through OpenSSL 3.5+ for C or Bouncy Castle 1.81+ for Java. The server can also deliver quantum key distribution material through KMIP as an ETSI-compliant key management entity. Linux and Windows are listed, with custom platform ports available on request. The product is intended for OEM integration; pricing and licensing details require contacting Cryptsoft.

KeyRack is an open-source key management coordination layer that you deploy in your own infrastructure, rather than use as a hosted cloud KMS. It tracks key hierarchies, drives rotation and delegates cryptographic operations to configured backends. Its KEK-wrapping hierarchies support namespace-scoped rules and cascade operations. Authorization is checked on every operation through an external policy decision point such as Cedar or OPA; KeyRack does not bundle an identity provider, but can integrate with OIDC providers including Keycloak, Auth0, Okta, Azure AD and Google Identity Platform. Backend choices include PKCS#11, HashiCorp Vault Transit, a KMIP client and in-process software for development and testing. Audit events can be delivered through NATS, files or stdout, with BLAKE3 hash-chain linking and optional Ed25519 signing. Non-exportable keys in an HSM or Vault provider remain there; exportable keys may leave through authorized export operations. The open-source core costs nothing under AGPL-3.0-or-later. Commercial licensing is available by contacting KeyRack for pricing and evaluation access.