#hsm — Public Fediverse posts

I do have a #JOSE library in #rust with #HSM support https://crates.io/crates/jose-rs please have a look if it fits your need.

I do have a #JOSE library in #rust with #HSM support https://crates.io/crates/jose-rs please have a look if it fits your need.

Crypto4A launches quantum-safe rival to AWS Secrets Manager

https://fed.brid.gy/r/https://nerds.xyz/2026/05/canadian-quantum-safe-secrets-manager/

Crypto4A launches quantum-safe rival to AWS Secrets Manager

https://web.brid.gy/r/https://nerds.xyz/2026/05/canadian-quantum-safe-secrets-manager/

Meta 1 мая показала как они хранят ключи от ваших бэкапов WhatsApp. Разбираю архитектуру и сравниваю

Дисклеймер: в статье несколько раз упомянут мой собственный мессенджер ONEMIX. Если такое триггерит — закройте сейчас, не обижусь. Если интересно как решают одну и ту же инженерную задачу в Meta и в команде из одного человека, поехали. Первого мая на Engineering at Meta вышел пост «How Meta Is Strengthening End-to-End Encrypted Backups». Одиннадцатого мая продолжение про Labyrinth 1.1, реализацию для Android. Я прочитал оба, потом полез в whitepaper, потом сравнил с тем что делаю у себя, и решил написать разбор. Не пересказ маркетингового материала, а нормальный технический разбор. Что они сделали, почему именно так, где у меня болело по дороге, какие компромиссы они выбрали, какие выбрал я. Сразу важная оговорка про что эта статья. Она не про шифрование сообщений в транзите. Signal Protocol, Double Ratchet, X3DH — всё это давно стандарт, все нормальные мессенджеры это используют. WhatsApp лицензировал Signal Protocol ещё в 2016-м. Транзит решённая задача. Эта статья про следующее звено цепи, которое для большинства пользователей до сих пор сломано. Про бэкапы.

https://habr.com/ru/articles/1038524/

#endtoend_шифрование #OPAQUE #HSM #WhatsApp #Meta #криптография #бэкапы #мессенджеры #RFC_9807 #информационная_безопасность

Looking through 2007 photos for something. Found some things along the way.

#Mac #Macintosh #retrogames #retrogaming #vintgecomputing #retrocomputing #screenshot #vintageApple #Apple #games #Psygnosis #Skyfox #EA #shufflepuckcafe #HSM #nostalgia #Macgaming #Macgames

Looking through 2007 photos for something. Found some things along the way.

#Mac #Macintosh #retrogames #retrogaming #vintgecomputing #retrocomputing #screenshot #vintageApple #Apple #games #Psygnosis #Skyfox #EA #shufflepuckcafe #HSM #nostalgia #Macgaming #Macgames

Just saw this very cool video on #DIY #DRAM:

https://youtu.be/h6GWikWlAQA

DIYing low-performance hardware such as #HSM​s or #microcontroller​s might actually become feasible in a few years :o

Here's a ldt of documentation by other folks working on such projects:

https://docs.hackerfab.org/home

It also lists a few open #hackerfab​s in the US and India.
Does anyone know whether any such open hackerfabs exist in the #EU too?

Хранение классифицированных данных

Всем привет! У меня есть публичный проект Архитектурные Этюды , в котором мы сообществом решаем реальные архитектурные задачи. Подумал сделать цикл статей, в котором представить анализ представленных проблем с учетом обсуждений участников и показать как могут выглядеть решения при всестороннем архитектурном рассмотреи. Первым кейсом выбрал «Хранение классифицированных данных», он не сложный, для многих – актуальный, поэтому выбор пал на него.

https://habr.com/ru/articles/1022584/

#Архитектура #шифрование_данных #безопасность_данных #pci_dss #hsm

This week in #FDroid (TWIF) was published the other day:

* Basic 2.0-alpha6 ready to translate #Weblate
* #ArcaneChat #DeltaChat at war with metadata
* #BasicSync for #Syncthing
* #Ente brings #EnteLocker
* #XBMC #Kodi update
* new #Lichess client
* #Threema does not want your metadata either
* #FMD teaches us #HSM app signing #Nitrokey #PKCS
+ 35 new apps
& 237 updates

What is metadata anyway? https://f-droid.org/2026/04/03/twif.html

This week in #FDroid (TWIF) was published the other day:

* Basic 2.0-alpha6 ready to translate #Weblate
* #ArcaneChat #DeltaChat at war with metadata
* #BasicSync for #Syncthing
* #Ente brings #EnteLocker
* #XBMC #Kodi update
* new #Lichess client
* #Threema does not want your metadata either
* #FMD teaches us #HSM app signing #Nitrokey #PKCS
+ 35 new apps
& 237 updates

What is metadata anyway? https://f-droid.org/2026/04/03/twif.html

Des werd' isch mer wohl angugge misse .... 😃

Stadtbilder – Ikonen des Stadtwandels | Historisches Museum Frankfurt
#Frankfurt #HSM #Fotografie

https://historisches-museum-frankfurt.de/de/ausstellungen/stadtbilder-ikonen-des-stadtwandels

Por que guardar a chave privada em HSM é mais seguro

Já pensou em onde sua chave privada está guardada? 🤔

• SD card é vulnerável — não é um elemento seguro. ❌
• O ideal: guardar a chave privada em um elemento seguro / HSM (uma plaquinha com HSM é feita pra isso). 🔐
• Muitos elementos seguros não são open source — isso gera problema de confiança. ⚠️
• Boa notícia: estão desenvolvendo elemento seguro...

#elementoseguro #HSM #hardwarewallet #segurança #chaveprivada #opensource #MorningCrypto

@benjojo @rysiek

Why does this chart make me think of the German #beA, part of electronic judicial/legal document exchange? I wonder... 😂

Warum muss ich bei dem Chart bloß an das deutsche #beA denken, Teil des elektronischen Rechtsverkehrs? Ich weiß es nicht... 😂

#ERV #HSM

@benjojo @rysiek

Why does this chart make me think of the German #beA, part of electronic judicial/legal document exchange? I wonder... 😂

Warum muss ich bei dem Chart bloß an das deutsche #beA denken, Teil des elektronischen Rechtsverkehrs? Ich weiß es nicht... 😂

#ERV #HSM

Thanks to a number of contributors with Jakob Schlyter in the lead, SOFTHSM has released version 2.7.0 with a lot of updates to stay up to date. We are still looking for funding for a major lift to PQC readiness.

We are very happy to be releasing a new version in the standalone project!

https://github.com/softhsm/SoftHSMv2/releases/tag/2.7.0

#SOFTHSM #HSM #PKI

Thanks to a number of contributors with Jakob Schlyter in the lead, SOFTHSM has released version 2.7.0 with a lot of updates to stay up to date. We are still looking for funding for a major lift to PQC readiness.

We are very happy to be releasing a new version in the standalone project!

https://github.com/softhsm/SoftHSMv2/releases/tag/2.7.0

#SOFTHSM #HSM #PKI

What a project. Did configure StepCA in my home-lab with a real physical HSM for the CA's private key. Using a SmartcardHSM (https://www.smartcard-hsm.com) from CardContact Systems.

Now I have acme (automated cert provisioning) working internally as long as the HSM is plugged into my server.

All running in an isolated FreeBSD 15-RELEASE jail (StepCA compiled from source with added PCSC-Lite support and usb device passed through by devfs rules).

Yay! It works!

#freebsd #stepca #devops #acme #certificates #tls #smartcard #hsm

What a project. Did configure StepCA in my home-lab with a real physical HSM for the CA's private key. Using a SmartcardHSM (https://www.smartcard-hsm.com) from CardContact Systems.

Now I have acme (automated cert provisioning) working internally as long as the HSM is plugged into my server.

All running in an isolated FreeBSD 15-RELEASE jail (StepCA compiled from source with added PCSC-Lite support and usb device passed through by devfs rules).

Yay! It works!

#freebsd #stepca #devops #acme #certificates #tls #smartcard #hsm

Website der Hochschule #Mainz #HSM ist noch online, ansonsten aktuell alles runtergefahren. Wenn sich nichts tut, morgen dann vier Stunden Lehre wie vor 30 Jahren. Studs in frühere Welten entführen - macht immer Spaß :anton:
An diejenigen, die auf E-Mail Antworten warten: Daumen drücken, dass es uns nicht allzu hart getroffen hat.

https://www.hs-mainz.de/news/cyberangriff-auf-hochschule-mainz/?back=1&cHash=435504c161a476e28729345dace589e2

Website der Hochschule #Mainz #HSM ist noch online, ansonsten aktuell alles runtergefahren. Wenn sich nichts tut, morgen dann vier Stunden Lehre wie vor 30 Jahren. Studs in frühere Welten entführen - macht immer Spaß :anton:
An diejenigen, die auf E-Mail Antworten warten: Daumen drücken, dass es uns nicht allzu hart getroffen hat.

https://www.hs-mainz.de/news/cyberangriff-auf-hochschule-mainz/?back=1&cHash=435504c161a476e28729345dace589e2

Thanks to @jpmens we now have documentation for Cascade describing how to integrate with a Nitrokey NetHSM to store your DNSSEC keys.

Thanks a lot! 🧡

#DNS #DNSSEC #HSM #OpenSource

https://cascade.docs.nlnetlabs.nl/en/latest/nethsm.html

Thanks to @jpmens we now have documentation for Cascade describing how to integrate with a Nitrokey NetHSM to store your DNSSEC keys.

Thanks a lot! 🧡

#DNS #DNSSEC #HSM #OpenSource

https://cascade.docs.nlnetlabs.nl/en/latest/nethsm.html

Импортозамещение: как мы в процессинге внедряли отечественный HSM

Привет! Меня зовут Денис, в ЮMoney я занимаюсь развитием и сопровождением процессинга. Расскажу, как мы внедряли отечественный HSM-модуль, с какими сложностями столкнулись в процессе тестирования, а ещё о загадочном исчезновении оперативной памяти и бунтующих блоках питания.

https://habr.com/ru/companies/yoomoney/articles/967502/

#hsm #импортозамещение #финтех #процессинг #сетевое_оборудование #мониторинг #платежная_система

@jpmens @bortzmeyer @themozzie @terts @bal4e

ReStructuredText and particularly ‘intersphinx’ shenanigans will be the end of me. 🫩

For now I prevailed, with links from the Cascade docs to the brand new kmip2pkcs11 manpages for setting up your HSM.

https://cascade.docs.nlnetlabs.nl/en/latest/hsms.html

#DNS #DNSSEC #Cascade #HSM #documentation

@jpmens @bortzmeyer @themozzie @terts @bal4e

ReStructuredText and particularly ‘intersphinx’ shenanigans will be the end of me. 🫩

For now I prevailed, with links from the Cascade docs to the brand new kmip2pkcs11 manpages for setting up your HSM.

https://cascade.docs.nlnetlabs.nl/en/latest/hsms.html

#DNS #DNSSEC #Cascade #HSM #documentation

Aviation weather for Horsham airport (Australia) is “METAR YHSM 050200Z AUTO 29019KT 9999 // NCD 27/01 Q1011 RMK RF00.0/000.0” : See what it means on https://www.bigorre.org/aero/meteo/yhsm/en #australia #horshamairport #yhsm #hsm #metar #aviation #aviationweather #avgeek #airport vii3

Aviation weather for Horsham airport (Australia) is “METAR YHSM 050200Z AUTO 29019KT 9999 // NCD 27/01 Q1011 RMK RF00.0/000.0” : See what it means on https://www.bigorre.org/aero/meteo/yhsm/en #australia #horshamairport #yhsm #hsm #metar #aviation #aviationweather #avgeek #airport vl

Aviation weather for Horsham airport (Australia) is “METAR YHSM 230200Z AUTO 23009KT 9999 // FEW028 SCT043 14/07 Q1024 RMK RF00.0/000.0” : See what it means on https://www.bigorre.org/aero/meteo/yhsm/en #australia #horshamairport #yhsm #hsm #metar #aviation #aviationweather #avgeek #airport vl

The #TPM in your computer is a trusted and #secure #hardware #credential storage #vault. Similar to a hardware security module (#HSM). It provides a #SecureEnclave for the storage of your private keys and other credentials your computer (and your account) uses.

This is operating system agnostic. #Windows may have pioneered the use of TPMs to help thwart network-based credential stealing attacks but they certainly aren't the only OS that makes use of them.

Even Macs have them. They're called "T2 security chips".

When you disable these chips you force the OS to only store your credentials on your hard drive, which means they can easily be extracted by anyone with physical access to your computer and via any network-based vulnerabilities that allows those storage areas to be read.

This is also why #Windows11 now forces the presence of a TPM in order to boot. Why? Because the threats to your credentials are too great. Especially now considering everyone is moving to Passkeys and the like.

Only a goddamn fucking moron would disable their TPM chip in today's world.

That's like refusing to wear your seatbelt while driving. Refusing to wear a helmet while riding your motorcycle. Refusing to have smoke alarms or fire extinguishers in your house. Jumping into shark infested waters without a fucking chainmail suit.

We have things in our lives that provide protection to us for a reason. Making a conscious decision to not use them is simply foolish.

Aviation weather for Horsham airport (Australia) is “METAR YHSM 100200Z AUTO 25018KT 9999 // BKN031 OVC037 11/05 Q1008 RMK RF00.0/000.0” : See what it means on https://www.bigorre.org/aero/meteo/yhsm/en #australia #horshamairport #yhsm #hsm #metar #aviation #aviationweather #avgeek #airport vl

We have a retired SafeNet Luna 4 #HSM in the office for testing our Nameshed HSM code, but we're having a bit of a hard time obtaining a PKCS#11 Linux library / SDK for it.

(Plan B would be someone giving us testing access to their Thales Luna)

Is there anyone who can help @ximon18 out? Sharing is caring. 💚 #DNS #DNSSEC #OpenSource

We have a retired SafeNet Luna 4 #HSM in the office for testing our Nameshed HSM code, but we're having a bit of a hard time obtaining a PKCS#11 Linux library / SDK for it.

(Plan B would be someone giving us testing access to their Thales Luna)

Is there anyone who can help @ximon18 out? Sharing is caring. 💚 #DNS #DNSSEC #OpenSource

The Anatomy of Autofocus: How Cameras and Lenses Achieve Perfect Focus https://petapixel.com/2025/07/03/the-anatomy-of-autofocus-how-cameras-and-lenses-achieve-perfect-focus/ #contrastdetection #depthfromdefocus #hybridautofocus #phasedetection #voicecoilmotor #steppingmotor #Educational #linearmotor #Technology #ultrasonic #autofocus #Guides #Canon #nikon #dpaf #pdaf #Sony #dfd #hsm #ssm #stm #swm #usm #vcm

The Anatomy of Autofocus: How Cameras and Lenses Achieve Perfect Focus https://petapixel.com/2025/07/03/the-anatomy-of-autofocus-how-cameras-and-lenses-achieve-perfect-focus/ #contrastdetection #depthfromdefocus #hybridautofocus #phasedetection #voicecoilmotor #steppingmotor #Educational #linearmotor #Technology #ultrasonic #autofocus #Guides #Canon #nikon #dpaf #pdaf #Sony #dfd #hsm #ssm #stm #swm #usm #vcm

Настройка КриптоПро HSM Client на Suse/RedHat/ROSA Linux и Мир будущего

В новой публикации я покажу, как разработчику информационных систем со встроенными СКЗИ настроить интеграцию с программно-аппаратным криптографическим модулем КриптоПро HSM. Научимся использовать HSM, как самостоятельный криптографический провайдер с выполнением всей математики на борту или только в качестве надежного хранилища ключевого материала. И в завершении затронем важные вопросы ответственности и этики, которые неизбежно возникают при работе с данными технологиями и инструментами.

https://habr.com/ru/companies/alfa/articles/917198/

#linux #криптопро #hsm #cryptopro #pki #криптопровайдер #криптография #электронная_подпись #ключи_шифрования #альфабанк

CyMaIS: 100 % DSGVO-konform

Die Datenschutz-Grundverordnung (DSGVO) schreibt strenge Vorgaben vor, wenn es um den Umgang mit personenbezogenen Daten geht. Wer seine Unternehmensdaten und die persönlichen Informationen von Mitarbeitenden oder Kund:innen schützen möchte, braucht mehr als nur eine Standard-Cloud. CyMaIS erfüllt nicht nur sämtliche DSGVO-Anforderungen, sondern geht mit ausgefeilten Sicherheitskonzepten und flexibler Infrastruktur noch einen Schritt weiter.

[…]

https://blog.cymais.cloud/blog/2025/06/19/cymais-100-dsgvo-konform/

Безопасность по ГОСТу: процесс интеграции HSM отечественного производства

В последние годы аппаратные модули безопасности (HSM, Hardware Security Module) стали неотъемлемой частью цифровой инфраструктуры — от банков и удостоверяющих центров до критически важных промышленных объектов. Эти устройства выполняют ключевую задачу — защищают криптографические ключи, обеспечивают безопасное шифрование, подпись и аутентификацию. И если раньше большинство организаций полагались на продукцию зарубежных вендоров, то теперь ситуация изменилась кардинально. Санкционное давление, геополитические риски и угроза отключения от поддержки западных производителей поставили под вопрос безопасность ключевых инфраструктур. На повестке дня встал вопрос цифрового суверенитета: как обеспечить защиту данных, если поставки критических компонентов нестабильны или вовсе прекращены? Ответ — в переходе на отечественные HSM. За последние несколько лет в стране развернулось производство собственных модулей безопасности, адаптированных под национальные стандарты и алгоритмы (включая ГОСТ). Но создание устройства — это лишь половина дела. Гораздо сложнее — внедрить его в реальную, часто унаследованную, инфраструктуру, интегрировать с существующим программным обеспечением, обеспечить отказоустойчивость и соответствие нормативным требованиям. Эта статья — о том, как мы на практике проводили внедрение отечественных HSM в промышленную эксплуатацию. Какие сложности возникли при замене импортных решений?

https://habr.com/ru/articles/913036/

#hsm #криптография #импортозамещение

Kennt sich jemand eingehender mit der technischen Umsetzung von Passwortmanagern aus. Mich interessiert die über ein HSM-gesicherte Ablage von Keys, Nichtexportierbarkeit von bestimmten Keys und Verwendung als Middleware für S/MIME, Signatur- und Authentifizierungszertifikaten. Ich habe bisher nicht viel darüber gefunden und würde gerne wissen ob es technische Gründe dafür gibt oder eher an dem mangelnden Bedarf liegt. #smime #passwordmanager #hsm

Kennt sich jemand eingehender mit der technischen Umsetzung von Passwortmanagern aus. Mich interessiert die über ein HSM-gesicherte Ablage von Keys, Nichtexportierbarkeit von bestimmten Keys und Verwendung als Middleware für S/MIME, Signatur- und Authentifizierungszertifikaten. Ich habe bisher nicht viel darüber gefunden und würde gerne wissen ob es technische Gründe dafür gibt oder eher an dem mangelnden Bedarf liegt. #smime #passwordmanager #hsm

Auditor app version 89 released:

https://github.com/GrapheneOS/Auditor/releases/tag/89

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/22183-auditor-app-version-89-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 89 released:

https://github.com/GrapheneOS/Auditor/releases/tag/89

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/22183-auditor-app-version-89-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 88 released:

https://github.com/GrapheneOS/Auditor/releases/tag/88

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/21632-auditor-app-version-88-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Making a PCR Machine Crypto Sign Its Results https://hackaday.com/2025/03/01/making-a-pcr-machine-crypto-sign-its-results/ #polymerasechainreaction #cryptographicsignature #SecurityHacks #MedicalHacks #Science #signing #hsm #PCR

Making a PCR Machine Crypto Sign Its Results - Money, status, or even survival – there’s no shortage of incentives for faking res... - https://hackaday.com/2025/03/01/making-a-pcr-machine-crypto-sign-its-results/ #polymerasechainreaction #cryptographicsignature #securityhacks #medicalhacks #science #signing #hsm #pcr

Auditor app version 87 released:

https://github.com/GrapheneOS/Auditor/releases/tag/87

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/16868-auditor-app-version-87-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 86 released:

https://github.com/GrapheneOS/Auditor/releases/tag/86

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/16094-auditor-app-version-86-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

We just released version 0.3.0 of the nethsm-cli #RustLang #crate. 🥳

In this release of the `nethsm` #CLI we have added improvements ensuring the robustness of its use when handling keys and improved documentation for the use of namespaces. 🔑

https://crates.io/crates/nethsm-cli/0.3.0

#Nitrokey #NetHSM #HSM #ArchLinux #cryptography #DigitalSignature #encryption #decryption #OpenPGP

We have just released version 0.6.0 of the nethsm #RustLang library #crate 🥳

This release focuses on making the interface more robust using dedicated types for key IDs, adding validation of bit lengths for block cipher and #RSA keys and requiring unsigned integers for values that can not be negative (such as bit lengths or ports).

https://crates.io/crates/nethsm/0.6.0

#Nitrokey #NetHSM #cryptography #ArchLinux #DigitalSignature #encryption #decryption #OpenPGP #HSM

Auditor app version 85 released:

https://github.com/GrapheneOS/Auditor/releases/tag/85

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15578-auditor-app-version-85-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

We have just released version 0.2.2 of the nethsm-cli #crate 🎉

https://crates.io/crates/nethsm-cli/0.2.2

With this release the `nethsm` #CLI saw improvements for the restoring from backup and switched to the common nethsm-config crate for configuration handling.

#RustLang #Nitrokey #NetHSM #HSM #cryptography #DigitalSignature #signing #encryption #decryption #ArchLinux