2 ms·
There's no perfect scheme, but the best mechanisms I've seen for this in practice involve HSMs so that nobody, bad guy or good guy, can change the keys used for
by monocasa 5y ago
There's no perfect scheme, but the best mechanisms I've seen for this in practice involve HSMs so that nobody, bad guy or good guy, can change the keys used for encryption without physically pulling the module, and it can be disconnected and stored at a safe location once the backup is complete. Each redundant set of a backup has an HSM, and the HSMs are cold stored in different physical locations.
But yes, this is hard to get right as I hinted by the "but not impossible" quip.
- hughrr 5y agoMany years ago I was working for a defence contractor and an idiot hit the TOTAL ERASE button on an HSM. This all went to hell when no one could work out how to load the keys into it again for nearly two weeks...
- bradknowles 5y agoThe storage of the backup medium should be in write-only mode. So, once written, they cannot be changed. That will help.