Collaborate Disseminate
I’m a noob in data security area and I’m working on PoC for an app for managing some files. Now these files might be anything
from a leave of absence form to potentially confidential agreements.
Being a noob I did advise my team that we sh… Continue reading Is this a good way to manage encryption keys?
Is there a way to list all keys inside the Utimaco HSM, created by PKCS11 interface and cngtool?
currently, I only can view each of them separately:
PKCS11: using "PKCS#11 CryptoServer Administration" interface.
CNG keys using th… Continue reading List all keys in Utimaco HSM created by PKCS11 and CNG?
I’m exhausted after looking for an answer for 3 days. I don’t know if my suggested flow is wrong or my Google skills have really deteriorated.
My API needs to create a valid certificate from a CSR it received, by signing it with a private … Continue reading How should I sign a CSR using a signature created in HSM, in C# .NET Core?
What makes the YubiHSM an HSM?
Most HSMs I have seen have more memory and are faster, perhaps due to crypto-accelerators. They’re generally big and inserted in data center racks, or plugged as PCIe cards.
But the YubiHSM is tiny, I was won… Continue reading Why is YubiHSM an HSM?
The named hardware dongles (or at least several models of them) allow me to store PGP secret keys key.
Suppose I am using such a secret key to sign data (doesn’t matter what). As I understand the operation happens on the hardware itself an… Continue reading Conceptual question regarding signing with Yubikey/Solokey/Nitrokey using GnuPG
Could anyone explain why the bolded part of the wrap key description?
Wraps a symmetric key using a specified key. The WRAP operation
supports encryption of a symmetric key using a key encryption key that
has previously been stored in an … Continue reading Wrap key operation in Azure Key Vault – symmetric keys
I was wondering if I correctly understand the difference between hardware and software protected keys.
Quoting the Applied Cryptography in .NET and Azure Key Vault (page 146 available on Google books)
Azure Key Vault Hardware Mode
When yo… Continue reading Azure Key Vault – hardware vs software protection
I’m trying to wrap AES keys with an AES key using PKCS#11. Keys to be wrapped have the attribute CKA_WRAP_WITH_TRUSTED but the wrapping AES key(KEK) have the CKA_TRUSTED = false and still the wrapping works. Shouldn’t this be impossible. A… Continue reading Wrap keys with an AES key
Basically, when we execute a generate key command such as A0 then we receive a key-under-lmk for future use. What if we have multiple HSMs in a high availability configuration? How would we make sure that all keys-under-LMK mean the same t… Continue reading Is it possible to sync up LMKs in two Thales PayShield 9000 instances>
Have a doubt about about how AWS KMS handles their asymmetrical/symmetrical keys. Does AWS KMS use Hardware Security Modules (HSMs) underneath by default? (cant find documentation that prove/dissmiss the fact).
I saw that it is possible t… Continue reading Does AWS KMS use HSM underneath by default?