> If I actually expect cover channel data exfiltration, or really don't trust in generating crypto keys on standard Intel architecture. But the second one is so

> If I actually expect cover channel data exfiltration, or really don't trust in generating crypto keys on standard Intel architecture. But the second one is solved by HSMs too. The HSMs I've worked with were linux boxes, running on standard Intel hardware with some added tamper protection sensors and a battery for the EC. They even used OpenSSL behind the scenes. I'm sure they don't all work that way, but it'd be a mistake to think that HSMs are all unicorns and rainbows and immune to these kinds of attacks.