Collaborate Disseminate
I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options.
Option 1) Storing the key on the same server (not recommended, because an attacker might easily get ac… Continue reading Storing an encryption key securely
ETSI TS 135 206 defines the specification of MILENAGE algorithm which is an authentication algorithm for mobile networks.
It defines ‘OPc’ as below:
a 128-bit value derived from OP and K and used within the computation
of the functions.
… Continue reading How to calculate Millenage OPc value while OP stored in HSM?
Based on my understanding, some types of HSMs allow custom software to be developed that can run within the HSM’s secure enclave. This capability allowed Square to do something very clever to boost the security of their cryptocurrency cold… Continue reading Examples of custom key restriction policies for HSMs
I’ve been attempting to learn about the different features and uses of HSMs, and I keep thinking that someone must have put together a set of design patterns for different ways that HSMs can be used to secure different things.
For example,… Continue reading What are the "Design Patterns" for working with HSMs?
I recently read this article about a company using HSMs to protect digital assets. They make some claims like:
There are secure and insecure ways to use HSMs
and
For example, imagine your keys are held in an HSM connected to a server, a… Continue reading What is the secret that they have developed to use HSMs securely?
Our project is to apply digital signature to PDF, so each user should have their own key pairs and a certificate. To keep key securely, we plan to purchase HSM, but from what I understand HSM have a limited number of keys that it can store… Continue reading HSM High Volume Keys
The error I get from pkcs11-tool.exe is "No slots."
My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop.
Note: this is NOT for logging in with… Continue reading How do I get my server HSM working while connected via RDP? (Win 2019)
Scenario: I need to implement MTLS between three of my services communicating with each other.
Based on my understanding of MTLS, I need to import the certificate of target services in the trust store of the source service and the certific… Continue reading Handling MTLS with HSM
I’ve read several times that many HSMs support configurable rate limiting on cryptographic operations, as a way of protecting against a hacker that compromises a server that has access to the HSM. So if a hacker compromised a server and th… Continue reading Is "time locking" a good strategy for protecting data with HSMs?
How do cloud providers (like AWS, GCE, Azure) secure their servers against stealing server TLS keys? Do they use HSMs?