Collaborate Disseminate
I had generate a BDK under LMK with command code BI.
And how can i pass the BDK under LMK to terminal for key injection?
can I just directly pass BDK under LMK to terminal or i need any more further command ?
I had try to just inject the … Continue reading Thales 9000 BDK BI [closed]
I have implemented a solution where I can decrypt DUKPT taking 10 bytes of KSN, and derive a key using a vendor defined mechanism. This vendor defined mechanism uses the existing parameter of CK_KEY_DERIVATION_STRING_DATA. I tried to imple… Continue reading PKCS11, softHSM, and vendor defined mechanism
So far, I knew that traditional HSMs (Hardware Security Module) can be used to store key of a single user. But, recently, I came to know that newer HSMs have the capability to store keys of multiple users and let users use those keys to s… Continue reading HSM: How multiple users are supported (using SAM)?
In the documentation of the AWS Key Management Service (KMS) I found this interesting sentence:
Asymmetric CMKs and asymmetric data key pairs are supported in all AWS Regions that AWS KMS supports except for China (Beijing) and China (… Continue reading Reason for lack of asymmetric cryptography in AWS KMS for regions in China
What is the purpose of embedding a Secure Element to enhance the security – especially the storage of keys- if a key is required to connect with it in order to get its secrets?
For example:
Let’s suppose I have a host that is not secure e… Continue reading Purpose of Secure Element
I’ve created an RSA private key in SoftHSM 2 via EJBCA with the following config:
attributes(*, CKO_PUBLIC_KEY, *) = {
CKA_TOKEN = false
CKA_ENCRYPT = true
CKA_VERIFY = true
CKA_WRAP = false
}
attributes(*, CKO_PRI… Continue reading RSA insensitive and extractable private key export from SoftHSM 2
I am going through the Thales HSM manuals, and frankly the key acronyms are driving me crazy. I would like to understand the differences between the following keys, and how they relate to one another:
LMK
TMK/TPK/TAK/TEK
ZMK/ZPK/ZAK/ZEK
… Continue reading Thales HSM: relationship between the various key types?
I searched for Yubico on this NIST validated modules but found only a module from the Yubico 4 series.
(https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Validated-Modules/Search)
Between Yubikey FIPS vs Yubikey HSM2,… Continue reading Is Yubikey HSM2 FIPS Compliant?
I have a setup whereby the SSL certificates are terminated at the load balancer (i.e. Load balancer to web server is in plaintext). In order to do the SSL termination, the private key is stored on the load balancer itself. I do have a HSM … Continue reading Storage of SSL private key in load balancer VS HSM
In Oracle DB 12c, which uses TDE-Tablespace level. If i want to implement key rotation policy, what is the impact?
1. Is it the Tablespace key that will be rotated or the Masterkey?
2. Does key rotation involve, Decrypting th… Continue reading TDE – Does Key Rotation involve full tablespace Decryption and Re-Encryption?