I built a cryptographic network service (CNS) to serve as a key vault. The idea is to deploy this on a dedicated host to effectively create a hardware security module (HSM) but one that communicates through an HTTPS REST API and can be extended to execute any cryptographic operation.

Features:

- Password hashing using Argon2id and signing JWTs with HS256. More cryptographic operations can be easily added as needed.

- Password hashing and JWT signing over HTTPS. Keys never leave the vault. - Multiple clients (i.e. users of the keys in the key vault) with one or more keys.

- An admin CLI for key management tasks.

CNS is the first step in a larger project of mine to run my own "data center" from home and to self-host as much of my own software as possible.