Re:Show HN: Picohsm, a $5 open-source hsm
by vbezhenar on Sunday March 31, 2024 @04:20PM
(#39887702)
I don't think rp2040 has any protected storage. HSM is supposed to store keys securely, so even with physical access an attacker would require very advanced methods to extract keys. With typical raspberry pi's, all you need is to connect to the SPI flash and you'll get access to all its contents.
May be I didn't understand something about this project.
Also 124 seconds for RSA2048 sounds awfully slow. Is rp2040 really THAT slow? I feel something's wrong here.
Re:Show HN: Picohsm, a $5 open-source hsm
by kam on Sunday March 31, 2024 @04:35PM
(#39887844)
It says it encrypts the SPI flash with a PIN provided over USB on every boot...but if you can trust the host to store/handle the PIN, why can't the host do the rest of the cryptography too?
May be I didn't understand something about this project.
Also 124 seconds for RSA2048 sounds awfully slow. Is rp2040 really THAT slow? I feel something's wrong here.
Anyway it's a nice project!