3

If you run RSA speed tests in OpenSSL you'll see that many operations are pretty fast, with the possible exception of RSA key pair generation. However, for that reason key pair generation is generally not used very often - RSA is generally not used to provide forward security in transport protocols, for instance. CPU's have been upgraded as well, and they ...


3

No, there's no standardized way to exchange key material between HSM (and often not even between HSM of the same manufacturer, although manufacturers may provide a backup/restore or replication capability that works at least within the same model). As far as an HSM is concerned, the world is divided in two: inside and outside. What is outside is not trusted. ...


2

It's cryptographic marketing spiel to convince end users to pay double. This is about hardware. All it means is that the cryptographic key(s), typically generated via a true random process, is/are never sent outside of the physical device. The best way to illustrate this is by example: https://www.maximintegrated.com/en/design/partners-and-technology/design-...


1

There is no cryptographic way to attest to the deletion of a key. Cryptography deals with mathematical properties of information. If someone knows the key, they have the key and that's that. To have assurance that some information has been deleted, you need to use non-cryptographic means. The root of trust, i.e. the system that can provide the assurance you'...


Only top voted, non community-wiki answers of a minimum length are eligible