Encryption key manager security at Thales I

How can you enhance the security of a basic encryption key management server (KMS) using a hardware security module (HSM)? A HSM is a secure piece of hardware that can store secrets, and also perform cryptographic operations such as key generation, encryption/decryption, and signing/verifying, in a highly performance and secure manner. For this project, the objective is to identify all the areas of the KMS where cryptographic material is handled and then adapt the design and implementation to use the HSM instead of performing the operations in the regular application code.

Contact: Mathias Björkqvist (M.A.Bjorkqvist@hhs.nl)