I always wondered if HSMs are at risk to be compromised at the core (read: the manufacturer) such as those frome SafeNet (in use e.g. with Box.com on their ente

I always wondered if HSMs are at risk to be compromised at the core (read: the manufacturer) such as those frome SafeNet (in use e.g. with Box.com on their enterprise external HSM plan). And guess what, Gemalto merged with SafeNet the other day. http://www.safenet-inc.com/SafeNet-Gemalto-Merger/ http://www.safenet-inc.com/SafeNet-Gemalto-Merger/ Everything is compromised. Everything! References: https://www.box.com/blog/breaking-the-last-barrier-to-cloud-adoption-with-box-enterprise-key-management/ https://www.box.com/blog/breaking-the-last-barrier-to-cloud-... http://www.safenet-inc.com/data-encryption/hardware-security-modules-hsms/ http://www.safenet-inc.com/data-encryption/hardware-security...