Collaborate Disseminate
I’m trying to make a device that will encrypt and store data. It should require a master password at startup, but then shouldn’t need anything else to decrypt the data throughout the lifetime of the program. It also should be secure, i.e. … Continue reading HSM for Secure Encrypted Data Storage
I am trying to follow this tutorial https://p11-glue.github.io/p11-glue/p11-kit/manual/remoting.html , but there are many points making me confused.
Which side is pkcs11 server?
It said "Setting up the PKCS#11 forwarding server on … Continue reading PKCS#11 Forwarding: Clarifying Client and Server Confusion
I am setting up a nginx proxy. It requires to use HSM for TLS offloading. So I configure nginx that enables ssl_engine pkcs11;; instead of indicating ssl_certificate_key file path, I use pkcs11 URI to point to the private key in HSM. It is… Continue reading How nginx proxy to communicate with remote softHSM for offloading?
At the moment our Environment is On-Prim but very soon we will be moving to AWS cloud, but one obstacle we are facing and it is related to Luna Safenet Network 7 HSM.
Is it possible to export Private keys from One type of HSM to different … Continue reading Exporting HSM Keys [closed]
How we may copy the already loaded LMK from the HSM, because the 3 components previously copied are lost?
I am trying to find the locations on the embedded devices with micros that don’t support HSM/SHE. What are the ideas/suggestions for storing the symmetric keys? I found solutions that suggest using public/private keys to encrypt this symme… Continue reading what are the locations to store symmetric keys on the embedded controller without HSM or certs involvement?
When HSMs are not accessible, we often need alternative methods for securely storing and managing encryption keys
What open-source options exist for effectively managing encryption keys in a language-agnostic manner when HSMs are unavailab… Continue reading What are the effective open-source methods for storing and managing encryption keys in a language-agnostic manner when an HSM is unavailable?
If I have a program that runs on a regular basis, such as a cron job or systemd timer and it needs to access a secure resource like a hsm or encrypted database, what are the best practices to store/access the credentials to it?
Anyone ever had a vulnerability scanning experience on HSM Thales Payshield?
In my company, we are performing security scans on our infrastructure and we are considering how to treat HSM. We are using Qualys, and our HSM management office … Continue reading Vulnerability scans on HSM Thales payShield [closed]
I’m a bit confused with PKCS11 (v3) standard…
In particular, it’s blurry to me if one can invoke C_DeriveKey, passing, say, CKM_SHA512_KEY_DERIVATION (or some HKDF) to it as the mechanism and also set the following in the template:
CKA_… Continue reading Deriving EC keypairs pairs via PKCS11?