3 ms·

I thought that too. The Nitrokey HSM would do what he's looking for, except that it's exposed as a PKCS#11 module.