In addition to its built-in capabilities, cryptlib can make use of the crypto capabilities of a variety of external crypto devices such as: Hardware crypto accelerators Fortezza cards PKCS #11 devices Crypto smart cards Hardware security modules (HSMs) PCI crypto cards Dallas iButtons Datakeys/iKeys PCMCIA crypto tokens USB tokens
	These devices will be used by cryptlib to handle functions such as key generation and storage, certificate creation, digital signatures, and message en-and decryption. Typical applications include: Running a certification authority inside tamper-resistant hardware Smart-card based digital signatures Message encryption/decryption in secure hardware
	cryptlib manages any device-specific interfacing requirements so that the programming interface for any crypto device is identical to cryptlib's native interface, allowing existing applications that use cryptlib to be easily and transparently migrated to using crypto devices. The ability to mix and match crypto devices and the software-only implementation allows appropriate tradeoffs to be chosen between flexibility, cost, and security.