Public Key Infrastructure for Tcl
Tcllib now has a "PKI" module. This module includes support for RSA certificates, but is extensible to include other types of public key cryptographic systems.
TclPKCS11 [L1 ] supports loading a PKCS#11 compliant module and offloading sensitive cryptographic operations onto it. It requires the "PKI" module in Tcllib.