Global web icon
stackexchange.com
https://security.stackexchange.com/questions/88744…
encryption - What are the differences between TPM and HSM ...
TPM (Trusted Platform Module) and HSM (Hardware Security Module) are considered as cryptoprocessor, but what are the differences exactly? Does one of them has more advantages than another?
Global web icon
zhihu.com
https://www.zhihu.com/question/65547083
信息安全中的HSM 和 SHE 两个概念有什么区别和相同的地方？
攻击者可以通过窃听CPU和HSM之间的线路，来获取有关秘密业务的信息，或要求HSM签名不是由CPU生成的数据，从而导致安全性降低。 因此，该体系架构适用于设计生产周期短、安全性要求低、产量少的应用。 2、HSM与CPU在同一芯片上，并且拥有状态机。
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/18933…
Why is an HSM required to protect CA certificates (rather than a ...
The Use of HSM's for Certificate Authorities HSM's are common for CA applications, typically when a company is running there own internal CA and they need to protect the root CA Private Key, and when RAs need to generate, store, and handle asymmetric key pairs. Uses outside of a CA HSM's are suggested for a companies Privileged Access Security ...
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/24654…
Open-Source Hardware Security Modules (HSM)
Developing an HSM is a lot of work, especially if you are complying with FIPS level 3 / 4 physical tampering and side-channel resistance. I could imagine a world where a group of tech giants get fed up with specialty HSM vendors and decide to come together to develop an open hardware standard and jointly invest the money and time to get it ...
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/22298…
Thales HSM: relationship between the various key types?
I am going through the Thales HSM manuals, and frankly the key acronyms are driving me crazy. I would like to understand the differences between the following keys, and how they relate to one anoth...
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/24896…
How do certification authorities store their private root keys?
The Thales HSM tools allow the key to be split into segments, each encrypted with a transport key, so that individual key holders can make their way to the key ceremony separately, by different transport (for heavens' sake, no car sharing) to the location, usually at the HSM in the production server room.
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/10770…
HSM Software Vs HSM Hardware - Information Security Stack Exchange
You can create software HSM, please read about security levels of FIPS 140-2, OpenSSL and Mandatory Access Control like stuff e.g. SELinux.
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/41581…
Possible to use a YubiKey in HSM mode to secure a Windows CA ...
I'm looking for a low-cost Hardware Security module, and discovered that YubiKey has a HSM mode. I'm not entirely clear if this HSM mode is what I'm thinking, but I'd like to use it as the offline...
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/20907…
What are the differences between HSM and SE?
The insides of a smart card, small HSM (USB dongle size), TPM, SE, etc. are all the same. There is a question of how much storage it has, which primitives/algorithms are supported, and how many operations per second it can do with those primitives, and the specifics of the native API it supports (it has to implement the TCG spec to be a TPM, and regardless of native API, you can translate from ...
Global web icon
stackexchange.com
https://security.stackexchange.com/questions/36664…
Criteria for Selecting an HSM - Information Security Stack Exchange
A very sensitive application has to protect several different forms of data, such as passwords, credit cards, and secret documents - and encryption keys, of course. As an alternative to developing a