3 ms·
I've been tracking Nitrokey for a couple of years now, and am really impressed with the products they offer. If you want an HSM (secure key storage), their Nit
by dmayle 6y ago
I've been tracking Nitrokey for a couple of years now, and am really impressed with the products they offer.
If you want an HSM (secure key storage), their Nitrokey HSM is available for only 70 euros (compare to YubiKey HSM at 600 euros).
If you wanted tiny (e.g. leave-in keys) YubiKey was the only option, but the Nitrokey 3 is supposed to be coming soon with leave-in for USB-A at least
- rckoepke 6y agoI thought these numbers must be off but the YubiKey HSM really is $650 [0]. What justified that price? Can someone walk me through the typical use case/application for these? 0: https://www.yubico.com/product/yubihsm-2/ https://www.yubico.com/product/yubihsm-2/
- dmayle 6y agoAn HSM is a device that's meant to hold keys, allow you to use them, but never allow you to access them. In other words, it's a true digital 'key' that can't be copied. If you truly care about the encryption on your servers, for example, then normally your server can't boot/decrypt the drive without an HSM (which you aren't supposed to leave plugged in). You give one to your CEO, your CTO, and your CFO, for example, and you require that at least two of them are present to boot your servers (to prevent attack by theft). There are more fault-tolerant possibilities out there (e.g. Hashicorp Vault), but they're generally bootstrapped from HSMs.