Stack Overflow
Stack Overflow

Questions tagged [hsm]

Hardware Security Modules are devices designed to protect cryptographic key material and accelerate certain operations.

Hardware Security Modules are computer devices that provide a protected environment in which cryptographic keys can be generated, used and (in some cases) stored. Without using an HSM, cryptographic keys are exposed in RAM during their generation and use.

Some HSMs also contain special-purpose chips that offer acceleration for particular cryptographic operations, such as RSA signature generation or elliptic curve operations.

412 questions
0
votes
1 answer

How to get X509Certificate from Thales HSM 8000?

I'm building an app connecting to HSM. I want to sign pdf file by this app. I have done this if the HSM has support for PKCS11. However, Thales HSM 8000 is not supported. I wish to take X509Certificate2 from Thales HSM 8000. I tried to send and…
Nam Hồ Thanh
  • 41
  • 1
  • 1
  • 8
0
votes
1 answer

Extract encrypted session key from CMS Enveloped data using bouncycastle

I am working on a project(Java), and requirement says that we have to decrypt a CMS envelope from a third party. Private key corresponding to this public key is stored in HSM and is non exportable. So all I need to do is extract encrypted session…
Mechanic
  • 1
  • 1
0
votes
1 answer

How to p/invoke this methode?

typedef CK_CALLBACK_FUNCTION(CK_RV, CK_CREATEMUTEX)( CK_VOID_PTR_PTR ppMutex ); regards, /* I need also to get my hsm informaton via a C# application by P/Invoke PKCS#11*/
loupoo
  • 31
  • 4
0
votes
2 answers

Can I use a 3DES key within google KMS HSM?

I have been looking across the different HSM provides alike Azure, AWS, IBM and Google but I haven't find any documentation about google HSM explicitely supporting 3DES keys. However I can see the type…
Lorenzo SU
  • 45
  • 2
  • 5
0
votes
1 answer

Store data securely in memory (password based encryption)

I have to store the key into memory. So as security concern we can not store the cryptographic key into the memory directly, We need to store the key in Encrypted way. So the idea is we store the key in encrypted manner and at the time of crypto…
jiten
  • 5,128
  • 4
  • 44
  • 73
0
votes
0 answers

Error when KeyPairGenerator.getInstance("RSA", "nCipherKM") RSA algorithm disabled on nCipher HSM configuration

I am trying to generate a KeyPair using the Bouncy Castle library by create a nCipherKM instance and the RSA algorithm. This operation is failing, it seems to be caused due to an incorrect or incomplete configuration of the HSM and nCipher Tools…
Mark
  • 1
0
votes
0 answers

How to get al alias from hsm by SUNPKCS provider?

I want to get my all key aliases from hsm, but i get this error message : Exception in thread "main" java.io.IOException: load failed at sun.security.pkcs11.P11KeyStore.engineLoad(P11KeyStore.java:778) at…
Mehmet Özcan
  • 85
  • 1
  • 5
0
votes
3 answers

Compile Issues with OpenJDK and iText example

I have problems to compiling this example I am Using OpenJDK on Mac: openjdk version "12.0.2" 2019-07-16 Main Issue: The import sun.security.pkcs11.SunPKCS11 cannot be resovled Minor Issue: The constructor OcspClientBouncyCastle() is depricated What…
itart
  • 13
  • 2
0
votes
1 answer

M0 COMMAND USING THALES PAYSHIELD 9000

I have to send a M0 command to HSM but I dont know What I should send, somebody gave me an example that they send 000003M0002100BU761D8715ACC89399D328AA0FA047BE820040543DDABC563D6EF4F944AD59C979CDD64158FEA07A7207C39F036B0B0633FC60 And …
Marcos Lopez Sarabia
  • 11
  • 1
0
votes
2 answers

How to query HSM slot for value "key handle" using (known) value "key label"

Need to query HSM (in Python) using known values HSM "slot #", "key label" to obtain (unknown value) "key handle". Any suggestions?
JHZK99
  • 1
  • 1
0
votes
1 answer

How to configure RSA HSM private and public key in microsoft azure vault?

I have to configure RSA HSM Public and private key in the azure key vault and save the data in encrypted form.
Prashant Shivhare
  • 1
  • 2
0
votes
1 answer

What are the different ways an end-user with a mobile application authenticate with a HSM device?

I am exploring HSM devices to check their feasibility with blockchain platforms. I haven't found a good resource which tells how an end user who does not own a HSM but he's keys are stored on it, using a mobile application can authenticate himself…
mrSaraf
  • 123
  • 1
  • 13
0
votes
1 answer

HSM nCipher: OCS protected key with quorum m/n

I'm developing a server that implements a stamping server using a key protected by an OCS. The current configuration uses a quorum of 1/3. So when the server is starting, it asks the passphrase of the OCS in order to load the key. The client wants…
ferjani
  • 89
  • 8
0
votes
1 answer

What cryptographic librairies will help calculate shared point and derive keys?

We need to perform some cryptographic operations and I want to know what cryptographic librairies can fit my need. The following is the context: Given the fact that we have: An EC Private Key stored in the HSM An EC Public Key (public…
Ahmed MANSOUR
  • 2,369
  • 2
  • 27
  • 35
0
votes
1 answer

Hardware Security Module: How to use Digital Signatures

I have a request from the client. They wish to use SafeNet HSM replacement for USB digital signature. I get a lot of SDKs for Win64 file as: fm_sdk, hsm_net_server, network_hsm_access_provider, ptkc_sdk, . I have tried to find out on Google on how…
Nam Hồ Thanh
  • 41
  • 1
  • 1
  • 8
1 2 3
…
27 28