News for hackers. Stuff that matters.

A comment on If you’re not using SSH certificates you’re doing SSH wrong (2019). Parent comment

Re:If you’re not using SSH certificates you’re doing SSH wro... by xxpor on Thursday March 24, 2022 @03:34PM (#30794371)
The extreme version of this is using an HSM, and putting one in a safe deposit box.
[ Parent | on HN ]
Re:If you’re not using SSH certificates you’re doing SSH wro... by danuker on Thursday March 24, 2022 @06:29PM (#30796186)
It's not so extreme, you have to trust the HSM manufacturer.

Try generating randomness using casino-grade dice, and xor-ing it with the HSM. Maybe then.

[ Parent | on HN ]
Re:If you’re not using SSH certificates you’re doing SSH wro... by xxpor on Thursday March 24, 2022 @06:38PM (#30796316)
Now I'm wondering who's managed to pull off supply chain attacks on dice, since I'm sure it's happened already.
[ Parent | on HN ]