75

Hardware Security Modules Don’t Make Signing Interfaces Safe

Keeping a private key inside an HSM is not enough. UC San Diego and INRIA researchers forged RSA signatures without extracting the key — by treating the device …