Title :
Analysis of a hardware security module´s high-availability setting
Author :
Koppel, B. ; Neuhaus, S.
Author_Institution :
ETH Zurich, Zurich, Switzerland
Abstract :
Analysis of a hardware security module (HSM) revealed two flaws that could lead to security problems. The first involved key deletion; the second involved unauthorized members of a group of HSMs. Neither flaw is probably fatal, if organizations develop organizational ways to work around it. However, for organizations to apply the solutions, they must be aware of the flaws.
Keywords :
organisational aspects; security of data; HSM; hardware security module; high-availability setting; key deletion; organizational ways; unauthorized group members; HSM; cryptography; hardware security module; high availability; separation of duties; systems security;
Journal_Title :
Security & Privacy, IEEE
DOI :
10.1109/MSP.2013.56
