News for hackers. Stuff that matters.

A comment on Why One Key Shouldn't Rule Them All: Threshold Signatures for the Rest of Us. Parent comment

Re:Why One Key Shouldn't Rule Them All: Threshold Signatures... by mhluongo on Saturday March 21, 2026 @04:05PM (#47470747)
Again and again, we've seen that HSMs aren't secure against physical access of the device.
[ Parent | on HN ]
Re:Why One Key Shouldn't Rule Them All: Threshold Signatures... by bob1029 on Sunday March 22, 2026 @03:57AM (#47475375)
Can you point me to an example of a FIPS level 3+ certified device having its private keys compromised due to a defeat of the tamper resistant boundary?
[ Parent | on HN ]
Re:Why One Key Shouldn't Rule Them All: Threshold Signatures... by mhluongo on Monday March 23, 2026 @02:55PM (#47493633)
Here are a couple examples of physical access leading to key extraction. You're welcome to be pedantic (those are side channel attacks, they don't defeat the boundary!) but one way or another, physical access wins.

https://www.cl.cam.ac.uk/~rnc1/descrack/ https://ninjalab.io/eucleak/

[ Parent | on HN ]