hsms
Hardware security module simulator for chia bls12_381 signatures
Decision gist · record as of 2026-08-14
Yes, if you are building or operating a Chia node that requires offline transaction signing. The low install friction and permissive license make it straightforward to add. However, verify compatibility with your Chia version and Python environment first, and understand that aging maintenance means you may need to maintain or patch it yourself if the Chia protocol evolves significantly.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- On Windows, requires pyreadline as an additional dependency.
- Air-gapped deployment requires manual key transfer and spend bundle handling outside normal network channels.
- Low install friction with a pure-Python wheel distribution.
License · maintenance · safety
permissive license (permissive) — Licensed under Apache 2.0 (permissive), which allows commercial and derivative use with minimal restrictions; you must retain license notices and attribute changes.
last release 2025-11-20 (267 days)
0 known vulnerabilities (OSV.dev, 2026-08-14) · 108,204 downloads/mo, #12,569 on PyPI
Alternatives
Verify before relying
pip install hsms
from hsms import hsms
# Use command-line tools: hsms, hsmgen, hsmpk, hsmmerge, qrint- Whether the package works with current Chia blockchain protocol versions and chia_base/chialisp_puzzles releases.
- Specific Python version requirements (requires_python is unspecified in metadata).
- Security audit status or review of the BLS12-381 signing implementation.
- Whether the simulator accurately models real HSM behavior for production use.
What it is and what it does
HSMS is a command-line tool suite that simulates a hardware security module for the Chia blockchain, allowing you to sign transactions offline using BLS12-381 cryptographic keys. It runs on an air-gapped computer and accepts unsigned spend objects, producing full or partial signatures suitable for multisig scenarios. The package includes utilities to generate secret keys, display public keys, merge multisig signatures, and convert between binary and qrint ASCII formats, plus debugging tools to inspect spend bundles and unsigned spends.
The tool is built on top of Chia's core libraries (chia_base and chialisp_puzzles) and the segno QR code library. It is intended for operators who need to keep signing keys isolated from networked systems, a common requirement in cryptocurrency custody workflows. The aging maintenance status suggests it is stable but not actively developed, so it may lag behind new Chia protocol features.
Use it for
- Generate and manage BLS12-381 key pairs for Chia blockchain signing on an isolated computer.
- Sign Chia spend bundles offline using hsmgen and hsms, then transfer signatures back to a networked node.
- Create and merge multisig Chia transactions by combining partial signatures from multiple HSM instances.
- Debug and inspect Chia spend bundles and unsigned spends using hsm_dump_sb and hsm_dump_us utilities.
- Convert binary spend data to/from QR code ASCII format for air-gapped key and transaction transfer.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you are building or operating a Chia node that requires offline transaction signing.
The low install friction and permissive license make it straightforward to add. However, verify compatibility with your Chia version and Python environment first, and understand that aging maintenance means you may need to maintain or patch it yourself if the Chia protocol evolves significantly.
Install
hsms on PyPI
Before you install
Low install friction with a pure-Python wheel distribution. Maintenance status is aging—last release was 267 days ago—so expect minimal active development, though no recent breakage is evident.
On Windows, requires pyreadline as an additional dependency. Air-gapped deployment requires manual key transfer and spend bundle handling outside normal network channels.
License in practice
Licensed under Apache 2.0 (permissive), which allows commercial and derivative use with minimal restrictions; you must retain license notices and attribute changes.
Quickstart
pip install hsms
from hsms import hsms
# Use command-line tools: hsms, hsmgen, hsmpk, hsmmerge, qrintVerify before relying
- Whether the package works with current Chia blockchain protocol versions and chia_base/chialisp_puzzles releases.
- Specific Python version requirements (requires_python is unspecified in metadata).
- Security audit status or review of the BLS12-381 signing implementation.
- Whether the simulator accurately models real HSM behavior for production use.
Package facts
| License | permissive license permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 3 packagessegnochia_basechialisp_puzzles |
| Maintenance | Aging 267 days since the last release |
| First released | |
| Downloads | 108,204 / month, #12,569 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
Evidence: hsms-0.3.2-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “chia hsm simulator”
- hsmsProvides command-line tools to simulate a hardware security module…
- azure-keyvault-securitydomainManages security domains for Azure Key Vault Managed HSM—download,…
- azure-keyvault-administrationManages role-based access control, backup, restore, and settings for…
Give your agent the search over MCP, or paste the wish link into any chat.
More Cryptography packages
Certifi provides Mozilla's curated collection of root SSL certificates for Python applications to validate TLS hosts and verify certificate trustworthiness.
cryptography provides cryptographic recipes and low-level primitives for symmetric encryption, message digests, key derivation, and other common cryptographic algorithms in Python.
Pure-Python RSA encryption, decryption, signing, and key generation following PKCS#1 v1.5, with command-line and library interfaces.
pyOpenSSL wraps OpenSSL's SSL/TLS functionality for Python, providing high-level connection objects and certificate handling through a Python-friendly interface around OpenSSL's cryptographic operations.
Provides Microsoft Entra ID token-based authentication for Azure SDK clients through a set of TokenCredential implementations that handle OAuth flows and managed identity support.
PyNaCl provides Python bindings to libsodium for digital signatures, secret-key and public-key encryption, hashing, message authentication, and password-based key derivation.
See also python-pkcs11 · chia-puzzles-py · chia-rs · chia-base · securesystemslib · chialisp-puzzles · clvm-rs · chiapos · clvm-tools-rs · PyKCS11