Collaborate Disseminate
I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard interface to work with both SoftHSM2 and HSM/TP… Continue reading Use of SoftHSM2 in commercial products
What is the best place to store certificates and keys which are confidential and sensitive?
As I understand LUKS is fine and kernel transparently handles encryption/decryption. Also, the LUKS volume could contain anything and everything li… Continue reading Better security for storing certificates in LUKS or softhsm?
I was wondering if there is a possibility to leak sensitive information from a hardware security module for key finding purposes. Can you give some hints to search on the internet? my assumption is that the user has full privilege and can … Continue reading tricking HSM to access keys [closed]
From the definition of key escrow (a method to store important cryptographic keys providing data-at-rest protection), it sounds very similar to that of secure storage which could be basically software-based or hardware-based (TPM/HSM).
But… Continue reading key escrow vs secure storage(software/TPM/HSM)
Seeking assistance on using PKCS11 with a remote HSM.
I have a small linux host with an HSM card installed. The HSM has libraries and utility scripts provided to interact with it, on that host. These include a pkcs11 utility. What I can… Continue reading pkcs11 with remote HSM
A TPM, also known as a Trusted Platform Module, is an international standard for a secure cryptoprocessor and is a chip found on the computer’s motherboard. The function of a TPM is to generate encryption keys and keep a part …
Read More
The post Wh… Continue reading What is a TPM?
I was testing key generation on a Hardware Security Module and I noticed that it takes so much time to generate an AES 256 secret key on the HSM.
I’ve used pkcs11-tool to generate the key and it took about 5 sec to complete the task:
$ pkc… Continue reading Why does it take so much time to create a secret key on a HSM?
I have a hardware security module connected to a host computer (Windows/Linux). The HSM contains symmetric keys used to encrypt/decrypt data (i.e. files and real-time communications); the keys are stored inside the memory of the HSM and th… Continue reading Authenticate Windows/Linux process against hardware security module
I would like to build a feature in my website that will store certain information.
But i would like this data to be encrypted and decrypted by the user via a USB security device, such as the NitroKey.
Ideally, so the plain text version of … Continue reading communicate with security device from browser to encrypt/decrypt data
Let’s assume we have an internal environment consisting of some distributed systems, one central system and an internal PKI. The central system is serving a cluster of HSMs that shall be accessable by network in a securely controlled way. … Continue reading Secure Authentication of Technical User to a Network-Appliance-HSM