-
To better accommodate a wide range of HSMs(esp the ledger nano s), Tendermint `v0.29.0` is planning to switch to prehashing consensus messages before voting so. ed25519sign(privkey, sha512(msg)), and…
-
Hi, this issue is just to say I wrote a session pool management crate based on `r2d2`: https://github.com/spruceid/r2d2-cryptoki.
I believe it's the right way of handling concurrent requests for se…
-
Would it be possible to do something like add a C interface to https://github.com/Chia-Network/bls-signatures and release the capability to create BLS signatures in a firmware update?
This would be…
-
## Description
The `SecretManage` trait assumes a Slip-10 compatible implementer, i.e. a hierarchical and deterministic wallet.
## Motivation
Hardware security modules (HSM) used by larger co…
-
For example:
There is a generated cmdlet, which matches API design, where HsmName and ResourceGroupName are mandatory.
```
Get-AzKeyVaultManagedHsmRegion -HsmName -ResourceGroupName [-Subscriptio…
-
The current sign/ verify function take in a signer object with a sign function. This works great for a custom signer signing a single credential however many HSMs support batch signing, it would be gr…
-
The [Azure secure isolation guidance](https://learn.microsoft.com/en-us/azure/azure-government/azure-secure-isolation-guidance) document describes storage encryption and specifically [Server-side encr…
-
Hey,
I think DeviceCertificate, RootCertificate, HostCertificate and EscrowBag are extremely sensitive information of an iOS device, it should not be printed any time, even though in debug mode.
…
-
How do we bind the luks block that has detached header with clevis?
ghost updated
4 months ago
-
PyPKCS11 is required to use HSMs.
We should include the PyPKCS11 in the RPM packages, since installing it afterwards is a bit cumbersome.
We could either install it in the main server package or…