hsm - Working with split secret key -


i need import splits of secret key hsm device. key encryption key (kek) 3des key has been split transport , need recombined in destination hsm.

how can done ? splits being recombined in hsm itself, or being recombined outside of hsm , result imported hsm ?

thank !

if key parts available outside of hsm you'd xor values , set key. use ckm_xor_base_and_data or possibly proprietary command well.

ckm_xor_base_and_data requires @ least 1 key present. use combine keys sequentially, of course, if want holder different parts not able view other parts.


note assume here keys have been split using t = n key sharing using xor. in principle of secret sharing have been used.


Comments

Popular posts from this blog

SVG stroke-linecap doesn't work for circles in Firefox? -

routes - Laravel 4 Wildcard Routing to Different Controllers -

cross browser - XSLT namespace-alias Not Working in Firefox or Chrome -