4 ms·
The entire point of HSM is that physical access does not compromise your keys. The keys are not stored on a disk, and if someone tries to pry it open, it will e
by jeremyjh 14y ago
The entire point of HSM is that physical access does not compromise your keys. The keys are not stored on a disk, and if someone tries to pry it open, it will erase its memory. Check out their FAQ:
http://aws.amazon.com/cloudhsm/faqs/ http://aws.amazon.com/cloudhsm/faqs/
- MichaelGG 14y agoExtremely interesting paper on reverse engineering the Luna CA3, which is the same vendor Amazon is using: http://www.cl.cam.ac.uk/~mkb23/research/Chrysalis.pdf http://www.cl.cam.ac.uk/~mkb23/research/Chrysalis.pdf Edit: And the final report: http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-592.pdf http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-592.pdf Which says it took 7 months to do the reversing.