You can do encryption backdoors

Re:You can do encryption backdoors by ryanlol on Sunday December 09, 2018 @11:44PM (#18645285)

How do you propose the keys would escape a HSM? You wouldn't keep this stuff connected to the network, so someone would have to get physical access to even attempt to attack it.

[ Parent | on HN ]

Re:You can do encryption backdoors by natch on Monday December 10, 2018 @02:21AM (#18645901)

lol!

[ Parent | on HN ]

Re:You can do encryption backdoors by ryanlol on Monday December 10, 2018 @11:12AM (#18648877)

Do you even know what a HSM is? Did you consider their existence before initially commenting?

If you do know what HSMs are, do you believe that they’re all useless?

Idk where the “lol!” came from, we’re talking about extremely standard cryptographic key storage here.

[ Parent | on HN ]

Re:You can do encryption backdoors by natch on Monday December 10, 2018 @01:00PM (#18649768)

You are seriously not trolling? Google “weakest link” and re-read the thread. An HSM is not magic and does not fix all the problems.

[ Parent | on HN ]

Re:You can do encryption backdoors by ryanlol on Monday December 10, 2018 @05:20PM (#18651611)

How would a government lose control of keys generated and stored within a offline HSM in a shielded room, without actually losing possession of that HSM? This is very obviously not unfeasible to implement in a secure manner.

So far you've only given examples of secrets which are really easy to lose control of, this simply isn't one.

I'm not trying to argue that this should be done, you claimed this can't be done which is obviously false

[ Parent | on HN ]

Re:You can do encryption backdoors by natch on Tuesday December 11, 2018 @09:47PM (#18660989)

I claimed what? Let's see the quote.

Reality is simply more messy than what you are envisioning.

What do you think an HSM is good for?

[ Parent | on HN ]