Mudrit
Pure-Rust PDF digital-signing SDK with PAdES, LTV, and RFC-3161 timestamping -- no OpenSSL, no Python.
Mudrit is a pure-Rust PDF digital-signing SDK with the iText-style layered appearance, certification and field-lock support, PAdES baseline profiles (B-B / B-T / B-LT / B-LTA), document timestamps, LTV (DSS with CRL and OCSP), RFC-3161 timestamping, AES-128/AES-256 encrypted output, and RSA (PKCS#1 v1.5 + PSS) and ECDSA signatures. It splits key management from PDF signing behind a single trait, so any key source -- PFX/PKCS#12 file, PKCS#11 token, or Windows certificate store -- can drive the same signing pipeline. It powers TrexoLab's own signing products, including the desktop PDF Signer and Bulk PDF Signer.
Features
- 100% pure Rust -- no OpenSSL, no Python dependencies
- PAdES baseline profiles B-B, B-T, B-LT, and B-LTA
- LTV (Long-Term Validation) with embedded DSS -- CRL and OCSP
- RFC-3161 timestamp authority support over HTTP/HTTPS (pure-Rust TLS, no OpenSSL)
- RSA (PKCS#1 v1.5 + PSS) and ECDSA signature algorithms
- AES-128 / AES-256 encrypted output
- Pluggable key sources -- PFX/PKCS#12 files, PKCS#11 tokens, Windows certificate store
- Keyword-based page placement and multi-signature support, including smart re-signing of already-signed PDFs
Tags
Related products
VerifyKit
SDKPDF signature verification SDK -- Rust/WASM engine, React viewer components, and a zero-config vanilla JS drop-in.
Authvon
PlatformSelf-host, enterprise-grade license server -- issue, activate, and manage software licenses under your own brand.
TrexoLab PDF Signer
Desktop AppCross-platform desktop PDF signing app -- hardware DSC tokens, PFX/PKCS#12 certificates, and RFC 3161 timestamping.