Questions tagged [hsm]

Hardware Security Modules are devices designed to protect cryptographic key material and accelerate certain operations.

Hardware Security Modules are computer devices that provide a protected environment in which cryptographic keys can be generated, used and (in some cases) stored. Without using an HSM, cryptographic keys are exposed in RAM during their generation and use.

Some HSMs also contain special-purpose chips that offer acceleration for particular cryptographic operations, such as RSA signature generation or elliptic curve operations.

412 questions
0
votes
1 answer

Error in digital signature

I'm using itext 5.5.6 to sign a PDF document, using the: Code sample 4.1: Signing a document using PKCS#11 of the book: Digital Signatures for PDF documents But I have the following error when validating adobe reader: Error during signature…
user3587281
  • 3
  • 1
  • 5
0
votes
1 answer

Using Amazon KMS service on Heroku

Has anybody tried to use AWS KMS on Heroku? On one hand, Heroku runs on AWS, so presumably it should work. On other hand, I haven't seen any references that it was used in Heroku. My main goal is to be able to get an encryption key from a hardware…
Victor Ronin
  • 22,758
  • 18
  • 92
  • 184
0
votes
1 answer

Exception while file signing using HSM and SUNPKCS11

We are using the HSM(Hardware Security Module) for the signing and encryption from our java application. We have plugged the HSM to our JVM using the java.security property file using the following…
Mayuran
  • 669
  • 2
  • 8
  • 39
0
votes
1 answer

M2 - Decrypt Data Block command failed

I am facing problem with DUKPT Decryption. I am sending the Decrypt Data Block (M2) command as per THales HSM manual, but I am getting error response as: 0000M315 Please find command below, Request you to help me whats wrong with my…
gufran91
  • 67
  • 1
  • 11
0
votes
1 answer

Java to HSM connection and sending "GC" / FK" commands

Here is code to send and receive data from HSM public class TestHSMJava { public static void main(String args[]) { System.out.println("<<< Main Method Entry >>>"); String command = null; Socket socket = null; DataOutputStream out =…
lsv
  • 1,687
  • 4
  • 21
  • 31
0
votes
1 answer

Connection failed to hsm luna SA 'C_Initialize' returns 0x30

I tried to connect to the luna SA, with the SDK installed and the luna and luna API. I have access to the moon, and I could open session in putty console. I used the login that comes in the example, but sends me an error. code: public…
bere
  • 1
  • 1
  • 2
0
votes
2 answers

PKCS11 Import Encrypted PKCS1 RSA Private Key

I have a simple straight question: Can an encrypted PKCS1 RSAPrivateKey be imported into a PKCS11 compatible security module without exposing the private key in the client's memory? I know that PKCS11 explicitly mentions PKCS8's PrivateKeyInfo as…
hiddenUser
  • 674
  • 1
  • 7
  • 19
0
votes
2 answers

‘pgp_sym_encrypt’ and ‘pgp_sym_decrypt’ mechanism with HSM (hardware security module)

I want to replace PostgreSQL encryption function ‘pgp_sym_encrypt’ and ‘pgp_sym_decrypt’ mechanism with HSM (hardware security module). Can i implement it to replace existing algorithm with HSM.
ajkush
  • 587
  • 2
  • 11
  • 25
0
votes
1 answer

how can I run the Thales "NC" diagnostic host command from linux / cygwin console

I would like to run the Thales NC (Perform Diagnostics) host command directly from a linux / cygwin console. How can this be done?
Chris Snow
  • 23,813
  • 35
  • 144
  • 309
-1
votes
1 answer

Using HSM as an external signer with NBitcoin

I have implemented signing transactions with HSM as a private key storage, but i encounter some errors! var network = Network.TestNet; var destination = BitcoinAddress.Create(receiverAddress, network); var sender =…
Rahmat Anjirabi
  • 868
  • 13
  • 16
-1
votes
1 answer

Can pkcs#11 library of one vendor be used with an HSM of another vendor?

Trying to understand whether it is feasible to create a multi-platform Python package that could be able to sign objects using HSM of any vendor? Since pkcs#11 libraries of different vendors must implement single interface, it seems to be possible…
Elephant
  • 675
  • 1
  • 8
  • 18
-1
votes
1 answer

How to import Symmetric key to thales HSM?

As title, how to import Symmetric key(Triple DES key) to thales HSM? Just like aws HSM, it can use imSymKey command. https://docs.aws.amazon.com/cloudhsm/latest/userguide/key_mgmt_util-imSymKey.html Please provide me code and example, thanks a lot.
beehuang
  • 339
  • 2
  • 18
-1
votes
1 answer

How to create AWS Cloud HSM using java code

I am looking for creating aws Cloud HSM using Java sdk. Does anyone already done? looking for some example. I can create by using AWS CLI but I want to do it through Java sdk. Thank you.
Rohan J Mohite
  • 2,283
  • 10
  • 19
-1
votes
1 answer

Does Hyperledger Fabric support Bip32-compatible HSM?

more context is that I'm looking forward to use some BIP-32 based hardware security module to be integrated with our Fabric network as an advanced security measure, does Fabric support this? Actually, the question behind is that does Fabric allow…
-1
votes
1 answer

C_GenerateKeyPair returned CKR_USER_NOT_LOGGED_IN

using (Session session = slot.OpenSession(SessionType.ReadWrite)) { session.Login(CKU.CKU_SO, "pin"); List publicKeyAttributes = new List(); publicKeyAttributes.Add(new…
TEngineer
  • 95
  • 1
  • 18
1 2 3
27
28