in-toto / in-toto-golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
https://in-toto.io/
Other
118 stars 49 forks source link

Hardware Security Module (HSM) Support #61

Open shibumi opened 3 years ago

shibumi commented 3 years ago

Please fill in the fields below to submit an issue or feature request. The more information that is provided, the better.

Description of issue or feature request: For supporting Hardware Security Modules (HSMs), we need the the following features:

Current behavior:

Currently, we have no HSM support, because we load keys from file. HSM support is especially interesting in combination with a smartcard daemon (for example a RSA key on a Yubikey).

Expected behavior:

We should support HSMs, if we want to keep up with modern security options.

lukpueh commented 3 years ago

Consult with https://github.com/secure-systems-lab/securesystemslib/pull/229