3 ms·
Unless the HSM is also doing the decryption, the key(s) can still be stolen while in RAM..
by Cyph0n 9y ago
Unless the HSM is also doing the decryption, the key(s) can still be stolen while in RAM..
- raesene9 9y agoindeed it is. With bank HSMs the encrypted key and characters from the user's password are passed into the HSM and the check is done within the secure hardware, the main system does not get to see the decrypted password.
- fgonzag 9y agoThat's the whole point of an HSM... A somewhat tamper resistant device that executes all encryption operations. You give it the hash and a reference to the the key, and it returns the signed data.