hsm - Working with split secret key -


i need import splits of secret key hsm device. key encryption key (kek) 3des key has been split transport , need recombined in destination hsm.

how can done ? splits being recombined in hsm itself, or being recombined outside of hsm , result imported hsm ?

thank !

if key parts available outside of hsm you'd xor values , set key. use ckm_xor_base_and_data or possibly proprietary command well.

ckm_xor_base_and_data requires @ least 1 key present. use combine keys sequentially, of course, if want holder different parts not able view other parts.


note assume here keys have been split using t = n key sharing using xor. in principle of secret sharing have been used.


Comments

Popular posts from this blog

android - Why am I getting the message 'Youractivity.java is not an activity subclass or alias' -

Making Empty C++ Project: General exception (Exception from HRESULT:0x80131500) Visual Studio Community 2015 -

How to fix java warning for "The value of the local variable is not used " -