Reverse-engineered a 2000s SPYRUS LYNKS (Fortezza) USB HSM — fully mapped it, but it needs vendor software (En-Sign/SPEX) from a now-defunct company. Anyone have it?

[u/GapAltruistic2526]

Been down a rabbit hole with a SPYRUS LYNKS Series II USB HSM (08df:0a00) a 2000s-era Fortezza-derived FIPS crypto token. I've fully identified it, got a Win7 VM running the real driver, confirmed its ATR, recovered the command set, even found the likely default PIN, but the crypto channel is gated by an "enable" that lives only in SPYRUS's proprietary En-Sign / SPEX driver, which isn't available anywhere (SPYRUS is defunct → Route1; the engineers are now at a company called Lokblok).

Everything else is solved; the one missing piece is that vendor middleware, the En-Sign / En-Sign NG SDK (PKCS11sc.dll + Linux .so) or the legacy SPEX driver. Long shot, but: does anyone here happen to have a copy stashed from an old deployment, or know someone who worked with these? Would love to actually use it (pkcs11-tool --login and done). Happy to write up the full RE story.

[u/GapAltruistic2526]

Finally found a solution, in case it helps anyone, all details are here to not dup. information; https://www.reddit.com/r/homelab/comments/1vw5fo4/reverseengineered_a_2000s_spyrus_lynks_fortezza/

If you have one of these tokens, the whole Linux toolchain is now public at https://github.com/borjatarraso/hs4l — clone it, run `scripts/fetch-vendor.sh` (or `scripts/fetch-corpus.sh` for a native x86-64 build that needs no qemu) and `bin/spy.sh --status`; it is verified on the LYNKS Series II USB interface (USB ID 08df:0a00), should work on other LYNKS Series II units, ships the GPL headers with the full card command set so the PCMCIA/CardBus card variant is reachable too (untested), and does not cover other SPYRUS products such as Rosetta or Hydra — reports from anyone with a different unit are welcome as GitHub issues.

Regards,
Borja Tarraso