home.social

#hardwaresecuritymodule — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #hardwaresecuritymodule, aggregated by home.social.

  1. David Runge @[email protected] ·

    Tomorrow I will be doing a talk at #FrOSCon about a project that I have been working on for a while: #Signstar - a secure signing environment based on @nitrokey's #NetHSM

    programm.froscon.org/2024/even

    #FrOSCon2024 #Rust #RustLang #DigitalSigning #ArchLinux #OpenPGP #SecureBoot #Packaging #Automation #HardwareSecurityModule #HSM

    #froscon #signstar #nethsm #froscon2024 #rust #rustlang
  2. David Runge @[email protected] ·

    I have just released version 0.1.0 of the #nethsm #crate, a library abstracting the use of the @nitrokey #NetHSM:

    crates.io/crates/nethsm

    Please have a look at the #documentation for further information on how to use it:
    docs.rs/nethsm/0.1.0/nethsm/

    The project is a milestone in the creation of a general purpose #SigningEnclave which we hope can be used for artifact signing purposes on #ArchLinux in the future.

    #HSM #HardwareSecurityModule #signing #encryption #decryption #RustLang

    #nethsm #crate #documentation #signingenclave #archlinux #hsm
  3. PrivacyDigest @[email protected] ·

    #Microsoft Signing Key Stolen by #Chinese - #Schneier on #Security

    Actually, two things went badly wrong here. The first is that #Azure accepted an expired signing key, implying a #vulnerability in whatever is supposed to check key validity. The second is that this key was supposed to remain in the the system’s #HardwareSecurityModule —and not be in software
    #privacy #China #signingkey

    schneier.com/blog/archives/202

    #signingkey #china #privacy #hardwaresecuritymodule #vulnerability #azure