Reputation
308
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 12
Newest
 Editor
Impact
~6k people reached

  • 0 posts edited
  • 0 helpful flags
  • 18 votes cast
Apr
22
accepted Can I use a KEK to protect data as well?
Apr
18
revised Can I use a KEK to protect data as well?
Improved details about the context of the question
Apr
17
comment Can I use a KEK to protect data as well?
@techraf I see your point. I've added more clarification to the question. Hopefully the context is clearer now and will enable you to ask more specific questions or actually answer the question.
Apr
17
revised Can I use a KEK to protect data as well?
added 201 characters in body
Apr
17
awarded  Editor
Apr
17
revised Can I use a KEK to protect data as well?
clarification added
Apr
17
comment Can I use a KEK to protect data as well?
@techraf These keys are the ones being sent to the recipient in the present message. It is a layered key model. It doesn't matter what they are used for. The point of the question is whether the protection of data should be a separate concern from the protection of keys.
Apr
17
asked Can I use a KEK to protect data as well?
Apr
6
awarded  Yearling
Mar
27
awarded  Notable Question
Feb
17
awarded  Curious
Jan
7
answered ArcSight logging - Windows Workstations
Oct
31
awarded  Enthusiast
Oct
28
answered Is it safe to send clear usernames/passwords on a https connection to authenticate users?
Oct
13
accepted Smart cards for user authentication - is configuration of PIN complexity important?
Oct
5
comment Smart cards for user authentication - is configuration of PIN complexity important?
"I'd say a 4 digit PIN is secure". Please can you justify your assertion. Is it down to the lock-out behaviour that the card implements?
Oct
5
asked Smart cards for user authentication - is configuration of PIN complexity important?
Sep
19
comment How to inject a key (physically) on a huge number of devices?
The same HSM can be program to inject IPEK (Initial Key) to all the devices as well. How is it physically done and how does the physical process scale up?
Sep
19
comment How to inject a key (physically) on a huge number of devices?
Thanks @Potion, very interesting. Your assumption is correct. How well does this scale up for a huge number of devices?
Sep
17
comment How to inject a key (physically) on a huge number of devices?
@halfinformed Very interesting comments, thanks! I think an answer that provided a review of smartcard chips, TPMs and HSMs (not necessarily specific products, but the class of device), the different key injection solutions for each class, and a comment on how the solution scales up, would be the winning answer.