hsm - Working with split secret key -


i need import splits of secret key hsm device. key encryption key (kek) 3des key has been split transport , need recombined in destination hsm.

how can done ? splits being recombined in hsm itself, or being recombined outside of hsm , result imported hsm ?

thank !

if key parts available outside of hsm you'd xor values , set key. use ckm_xor_base_and_data or possibly proprietary command well.

ckm_xor_base_and_data requires @ least 1 key present. use combine keys sequentially, of course, if want holder different parts not able view other parts.


note assume here keys have been split using t = n key sharing using xor. in principle of secret sharing have been used.


Comments

Popular posts from this blog

android - Why am I getting the message 'Youractivity.java is not an activity subclass or alias' -

python - How do I create a list index that loops through integers in another list -

c# - “System.Security.Cryptography.CryptographicException: Keyset does not exist” when reading private key from remote machine -