Is Apple's Cloud Key Vault a Crypto Backdoor?

Re:Is Apple's Cloud Key Vault a Crypto Backdoor? by azinman2 on Monday August 15, 2016 @01:02PM (#12291701)

What happens if the HSM decays or malfunctions in some way? Sounds like it's not possible to backup, and no computer/tech will last forever.

[ Parent | on HN ]

Re:Is Apple's Cloud Key Vault a Crypto Backdoor? by rocqua on Monday August 15, 2016 @01:30PM (#12291904)

The HSM is only the backup, it is not the primary copy. Losing the HSM means you are down to 1 copy (the vault on your device). That means there is only a small window of exposure where, if the HSM goes down and you lose your device, your passwords are gone.

They could probably roll with duplicated HSMs to mitigate this somewhat.

[ Parent | on HN ]

Re:Is Apple's Cloud Key Vault a Crypto Backdoor? by mkj on Tuesday August 16, 2016 @01:48AM (#12295767)

There are usually ways securely to backup HSMs to other HSMs.

[ Parent | on HN ]