4 ms·
Your question implies that the yubikey is an HSM. It isn't. It has a secure element. If you want to implement your own novel test of user presence, you could g
by jiveturkey 5y ago
Your question implies that the yubikey is an HSM. It isn't. It has a secure element.
If you want to implement your own novel test of user presence, you could get an F-Secure USB armory device (https://www.f-secure.com/en/consulting/foundry/usb-armory https://www.f-secure.com/en/consulting/foundry/usb-armory) and tap into the GPIO.
- FuriouslyAdrift 5y agoYubico does, however, make an actual HSM. https://www.yubico.com/products/hardware-security-module/ https://www.yubico.com/products/hardware-security-module/
- jiveturkey 5y agoby name only. it is also not an HSM by commonly understood definition. epoxied chip isn't enough to declare HSM-ness
- FuriouslyAdrift 5y agoI was on a team that evaled it for FIPS compliance. It's a full, FIPS compliant, HSM. It's $650 but that's still on the low side for an HSM.