OpenSSL Engine

What does it do? 

This OpenSSL CNG Engine project implements an engine for transparently leveraging Windows' Cryptography API: Next Generation (CNG) with OpenSSL 1.1.1. It supports CNG's Cryptographic Primitives as well as some of its Key Storage and Retrieval mechanisms and legacy CryptoAPI (CAPI) functionality for certificates.

Features 

• OpenSSL engine that redirects the EVP high-level cryptographic functions to their equivalent algorithms implemented by CNG Cryptographic Primitive Functions.
• Implementation of an OpenSSL STORE that supports enumerating over, addressing and using public key certificates and (private) keys stored in the Certificate Store.

Benefits

• Combine the flexibility of OpenSSL and the robust security of Windows CNG.
• Ensure compliance with IT policies and market regulations by using certified algorithms in OpenSSL applications.
• Leverage the Windows Certificate Store to securely manage certificates in OpenSSL applications, instead of using plain text files.