Re:Ask HN: Would a personal HSM be of interest?
by phillipseamore on Thursday December 24, 2020 @12:45AM
(#25525335)
Very interesting! What pricing do you have in mind? This appears more featureful than USB HSMs (like Yubico's) that go for <$1000. I'm not sure that I'd like to use a RPI for something like this but I'm guessing that the module could be transferred to another RPI if the first one dies? Does the module have power protection to survive a surge from the RPI?
[ Parent
| on HN ]
Re:Ask HN: Would a personal HSM be of interest?
by captaincrunch on Thursday December 24, 2020 @01:00AM
(#25525378)
I haven't thought of pricing, but I'd like to keep it affordable. The hardware module can be configured to permanently bond to the raspberry pi - meaning once the raspberry pi dies, the module is useless (proper HSM).
If not configured to bond, it would be less secure, but depends on what the person wants I guess. Making it bond to the raspberry pi requires that I physically modify the module before I send it out.
The module will run off the replaceable battery and also protects itself from power fluctuations/brownouts, etc. (it slides in whenever needing to be replaced) - and estimate that it will last about 3 years before needing to be replaced.