• Pamlock

    Password management for paranoid workgroups

Pamlock?

Pamlock is a password manager for security conscious workgroups. Pamlock (Password Manager Lockdown) stores confidential data encrypted with keys only available on its user's smart cards and an offline administrative workstation used to provision new smart cards.

No sensitive data is ever stored or handled in cleartext on the Pamlock server, neither is key material required for decryption of such data.

The foremost priorities in the design of the system is confidentiality, availability and accountability. A major design goal is that confidential data should be protected even if a server hosting the Pamlock server/database suffers from an intrusion or other form of compromise.

For the time being we only support current users of Pamlock. Pamlock might be offered commercially or as open source in the future.