Tous les livres

Professionnel

Applis À propos Coach Connexion Commencer la lecture

Quantitative Finance · Glossaire

Qu'est-ce que « Hardware security module » ?

Definition 29.5 Research, Data and Risk Platforms · Chapitre 29 — Security

A hardware security module (HSM) is a tamper-resistant device that generates and stores keys and performs operations with them, so that private keys never leave it in plain form; signing happens inside, on data the host presents.

The hook’s attack in one picture: the altered application showed the signers one transaction and sent their devices another. A control that decodes what is actually to be signed, independently of the application, and a policy that refuses what no signer should approve (a change to the wallet’s own contract, a new destination), check the thing signed rather than the thing shown.
Figure 29.1. The hook’s attack in one picture: the altered application showed the signers one transaction and sent their devices another. A control that decodes what is actually to be signed, independently of the application, and a policy that refuses what no signer should approve (a change to the wallet’s own contract, a new destination), check the thing signed rather than the thing shown.
Lire dans le chapitre →