5 ms·
> I'd bet that they somehow had access to the HSM, to have it sign the driver for them. Or were able to duplicate the HSM before it was delivered. You know, li
by titzer 9y ago
> I'd bet that they somehow had access to the HSM, to have it sign the driver for them.
Or were able to duplicate the HSM before it was delivered. You know, like how the NSA intercepted shipments of internet routers in transit and inserted backdoors.
- amaccuish 9y agoThat wouldn't work because HSMs are typically not delivered with keys, you generate the private key yourself.
- titzer 9y agoOk, makes sense. It could also be that the HSM was shipped from one office to another after keys had been loaded onto it. Dunno.
- erkkie 9y agoIn "secure" places, HSM's are basically in a vault with armed guards.
- slowburning 9y agoI have seen HSMs in a concrete fireproof room, inside another concrete room, inside a regular room, inside a nondescript building. This one required the use of 3 persons (one to authorize entry past the 2 guys with rifles, one to unlock the vault rack with the hsm, another to authenticate to the HSM to perform work).
- irundebian 9y agoCompany or agency?
- slowburning 9y agoa very large private company
- amaccuish 9y agoHSMs are designed to resist exporting private key material. And to sign something, you normally have to enter a PIN or a password. :)
- erkkie 9y agoYou don't ship HSM's with keys (you initialise them on-device yourself) nor can you read read keys out from one (at least in theory).
- Cthulhu_ 9y agoIn theory, theory and practice are the same, in practice they're not.
- ddtaylor 9y agoWell, an HSM that doesn't meet those requirements is essentially spoiled milk and of little value. I agree many HSMs are found vulnerable eventually.
- mygo 9y agoif the goal is to gain access to HSM’s signing functionality and you don’t need to know the HSM’s keys to gain access to its signing functionality then something else is being guarded that is essentially the key.. For example be it a machine locked in a room, then the room key is the key. Or maybe someone’s retina, or a sign-off from someone with clearance, etc. (at least in theory) That’s a general theory though, but I’d think the same fundamentals apply Also this only serves to prove that some powerful entity that operates on secrecy, like a government or mega corp, is likely who executed this. I’d like to fantasize some suave, determined black market salesman with a rough childhood and his band of cyber criminals broke into both of these facilities, but seeing how difficult it is to accomplish something like this, it seems more likely that someone just let them in through the front door.