I think there's some confusion. Are you sure that you are talking about the same thing? What I meant here is a real HSM, something similar to a IBM 4758 [0] (wh

I think there's some confusion. Are you sure that you are talking about the same thing? What I meant here is a real HSM, something similar to a IBM 4758 [0] (which was once vulnerable, but only because it had buggy software), not a SIM card or a credit card chip. Do you imply that many HSMs are based on the same Gemalto chip? [0] https://www.cl.cam.ac.uk/~rnc1/descrack/ibm4758.html https://www.cl.cam.ac.uk/~rnc1/descrack/ibm4758.html