Support HSMs - Githubissues

Finschia / ostracon

Ostracon, a consensus algorithm, is forked from Tendermint Core. We have added VRF to Tendermint BFT. It adds randomness to PoS Validator elections and improves security.

Apache License 2.0

69 stars 28 forks source link

Support HSMs #640

Open jaeseung-bae opened 1 year ago

jaeseung-bae commented 1 year ago

Summary

Support HSM

Problem Definition

It's not safe that ostracon keep their key on local. It's more secure to work with HSM.

Proposal

Need to support HSM for such jobs signing, verifying.
For the development purpose, need to support YumiHSM2
For the productional purpose, need to support one of HSMs that have been widely used in the market such as Thales, Utimaco, AWS HSM, entrust and etc.

For Admin Use

[ ] Not duplicate issue
[ ] Appropriate labels applied
[ ] Appropriate contributors tagged
[ ] Contributor assigned/self-assigned