3 ms·
I'd be interested in them doing a tear down of a FIPS 140-2 Level 3 or higher hardware security module. Basically systems designed to self-wipe on detection of
by mey 12y ago
I'd be interested in them doing a tear down of a FIPS 140-2 Level 3 or higher hardware security module. Basically systems designed to self-wipe on detection of tampering.
- usbreply 12y agoHave you seen the mikeselectricstuff youtube channel ? He did a teardown of a credit card reader. The "self wipe" functionality is implemented in a fairly simple way.
- iancarroll 12y agoHSMs are on an entirely different level compared to credit card readers. To OP, those devices are not cheap - they run $22k from SafeNet (dependent on what model, obviously). In addition, FIPS criteria is meant to be tamper evident (not tamper resistant). SafeNet does require a special key to recover after a tamper attempt, though: http://goo.gl/RyVtFj http://goo.gl/RyVtFj
- deleted 12y ago[deleted]
- pzb 12y agoHSMs also vary by manufacturer. The SafeNet Luna you linked to has both tamper as the case level and tamper as the actual HSM level. If you read the FIPS documentation for the SafeNet Luna SA, it has a PCIe card inside with a cryptographic module on the card that is the core to the system. Tampering with that is ever more destructive than just opening the case.
- Nursie 12y agoDepends on the reader I think. I would be interested to see what he did there. Credit card readers get scored on how hard they are to attack, and pass above some threshold based on difficulty of attack and time taken.
- AlyssaRowan 12y agoNice lab, guys. Love the bondage. We should work together sometime. :) Level 3 wouldn't be a problem, that's tamper evident really. Nothing is tamper-proof for an attacker with physical access, resources and time. You're looking at Level 4 for even any kind of real serious roadblock, but even then...