Posted Sep 25, 2012 8:20 UTC (Tue) by alonz (subscriber, #815)
In reply to: LSS: Secure Boot by Cyberax
Parent article: LSS: Secure Boot
Yeah, that sure is reassuring. </sarcasm>
Have you, perhaps, seen this? Or this (as applied to HSM's, considering the incompetence apparent from the first link)? I don't think HSM's are as magic as people expect them to be…
Posted Sep 25, 2012 8:29 UTC (Tue) by Cyberax (✭ supporter ✭, #52523)
[Link]
Naw, HSMs are protected against trivial attacks like this. I know for a fact that a certain large HSM from a company which names begins with "T" has an intermediary buffer that holds data after the encryption for a random (and quite significant) amount of time before transmitting it to client.