3 ms·
Yeah, it is puzzling that the key was able to be leaked in the first place. The key should have been in an HSM.
by conradev 3y ago
Yeah, it is puzzling that the key was able to be leaked in the first place. The key should have been in an HSM.
- er4hn 3y agoSame thing with Samsung and their key leak. Part of the blame, imo, lies with how clunky tools are at the lower levels. I've seen plenty of hardware based signing protocols that don't allow for key hierarchies. Higher level tools push this along as well. Hashicorp Vault also, last I checked, doesn't allow for being a front end to an HSM. You can store the master unlock key for a Vault in an HSM, but all of the keys Vault works with will still be in Vault, in memory.
- foobiekr 3y agoHSMs are not secure to sustained competent hardware attacks. This should have been on an HSM in multiple secure a signing service facilities with authenticated access and never handed to an OEM of any kind in any form.