3 ms·
> Is this actually a problem that anyone has -- sending workloads to untrusted servers? Yes, certainly, that's the whole point of HSM's (host security modules
by throwaway81523 5y ago
> Is this actually a problem that anyone has -- sending workloads to untrusted servers?
Yes, certainly, that's the whole point of HSM's (host security modules). They have been used since forever for encapsulating crypto secrets. The mapping between the number on the front of your credit card and the 3-digit CVV2 code on the back is done inside an HSM. They are cool devices to have inside servers. Having them in client computers makes them more likely to be used for evil (preventing people from controlling their own computers) as others have remarked here, unfortunately.
- ethbr0 5y agoNot my specialty, but my impression here was that they'd ballooned the functionality of the HSM into something resembling a general purpose computer? Or is this still talking about attested / secured storage more than processing?
- throwaway81523 5y agoHSM's have had computer-like capabilities since ages ago. SGX goes further and lets you run x86 apps (possibly such as media codecs) in an HSM-like "enclave".