3 ms·
“We built a cloud encryption platform” – “So what?”
- mankash666 10y agoI apologize for asking what may seem to you as a basic question. Why a custom hardware device instead of an application that does encryption locally on the customer's device of choice?
- grillvogel 10y agothe hardware is "trusted", the customer's device may not be.
- dc352 10y agoIt's not completely custom - trusted elements have independent evaluations (FIPS / EAL). We think that a combination of local and centralized elements provides best security.
- cmdrfred 10y agoI think to prevent an attack like this? http://www.bbc.com/news/technology-24048343 http://www.bbc.com/news/technology-24048343
- cyphar 10y agoHSMs are very good because the key isn't stored in a way that allows an attacker to get it. HSMs have authentication systems, so you can ensure that only the user can use the decryption key (but they can never get the actual key). Of course, you can misuse them to create proprietary jails for users, but they can be very good for device security.