an abbreviation for Hardware Security Module which is a security device that is compliant with PKCS11 standard and which is a secure storage for data specially private keys.

learn more… | top users | synonyms

0
votes
1answer
85 views

Public Key Encryption vs HSM for storing encryption keys

Let's say I have sensitive data in the database server that needs to be encrypted (i.e emails, etc..) and I want to make sure that in the event that the server is compromised, the attacker shouldn't ...
-1
votes
1answer
127 views

Integrate POS client with HSM Luna

I want to integrate and test a terminal device (PED) with HSM Luna. But I'm not able to understand steps clearly, as to what is done when a new device is integrated. Can anyone please help with this. ...
3
votes
0answers
787 views

Nginx and HSM integration to hold private keys

We are using Nginx and storing private keys in file on server. We would like to move private keys to HSM, so that ssl keys are stored in HSM and never leaves HSM. All crypto operations required during ...
2
votes
0answers
378 views

Thales HSM LMK keypairs: 00-01, 02-03, 08-09, 10-11, 12-13

In the Thales HSM documentation, 40 LMK keypairs are listed but the following keypairs are not shown in the keytype table: 00-01 02-03 08-09 10-11 12-13 Am I correct in thinking that the ...
1
vote
0answers
59 views

How to safely store/process secret key for JWT

After reading this: http://stackoverflow.com/questions/30089604/jwt-whats-a-good-secret-key-and-how-to-store-it-in-an-node-js-express-app, on how to store "secret key" to assign JWT tokens. I had ...
1
vote
0answers
26 views

AWS DMS to use CloudHSM

I have a source database that need to be migrated to another one. This target will be created and integrated with CloudHSM so that the data migrated is encrypted. For migration I am planning to use ...
1
vote
0answers
128 views

Through signing process with HSM Luna, What device perform the signing?

I'v succesfully configure and test character String signin usign Java and HSM Luna SA through PKCS11. My question is, In wich processor cryptographic operations are perform? In wich way HSM Luna ...
1
vote
0answers
590 views

Import securely RSA private key through PKCS#11

I have a cryptographic device that supports the following mechanisms: How I could securely import RSA private key into it? Because there is no support for wrap/unwrap using symmetric key is there ...
1
vote
0answers
1k views

Decrypt “key” that is encrypted with LMK or TMK

New to HSM (Thales payshield 9000), I'm working on DUKPT algorithm. I manage to derive the IPEK(encrypted either under LMK or TMK), but I need to inject a plain text IPEK into an end point device. I ...
0
votes
0answers
100 views

Need help implementing key management scheme

Scheme has following requirements Client application should perform encryption/decryption using component 1, component 2 and ZPK (zone PIN key. Client should get this key from host in encrypted form)...
0
votes
0answers
49 views

PKCS#11 Creating secret key object (ObjectHandle) from array of bytes

I use PKCS#11 interface to communicate with HSM. I want to know if there is a way of creating ObjectHandle object (AES secret key) from array of bytes, that i've previously generated and then use this ...
0
votes
0answers
61 views

Secure HSM connectivity, direct or LAN?

What would be considered a better and secure setup for HSM: A direct connection to the server (point-to-point) Having it in the LAN and configuring VLAN?
0
votes
0answers
36 views

Online Personalisation of Terminal-HSM key management

In Germany, there is a widely used key management called Online Personalisation of Terminal-HSM (OPT, Online-Personalisierung von Terminal-HSM). I would like to get details about it and to compare it ...