Demystifying Hardware Security Modules - How to Protect Keys in Hardware

Presented at DeepSec 2019 „Internet of Facts and Fears“, Unknown date/time (Unknown duration).

A secure crypto-algorithm is based on the fact that only the key needs to be kept secret, not the algorithm itself. The key is of high value and must be protected. In this talk we will have a look at how to protect keys and why a dedicated hardware is needed to make sure the key is kept secret and always under the control of the owner. Different use cases require different HSMs (Hardware Security Modules). We will have a look at data centres and cloud HSMs as well as at desktops and embedded solutions like industrial equipment or IoT-Devices. Afterwards you can visit us at our booth to see market leading HSMs in action and you will have the possibility to discuss features and functions with long-term crypto experts.

Presenters:

  • Michael Walser - sematicon AG
    Michael Walser is a member of the executive board and CTO of the Munich based security company sematicon AG. In this function, he is responsible for the company's technical business strategy and advises customers how to securely implement the digital transformation in industry and IT. After graduating in electrical engineering, he was working as a consultant and advisor on successful IT security and digital payment projects - always focusing on cryptography - for many years. He supported many customers worldwide and was also responsible for the projects' implementation. sematicon AG is a Munich-based company specialised in IT security and cryptography. We support our customers in mastering digital transformation successfully and securely in their operations. With a focus on IT, industry and electrical engineering, we offer highly specialised security solutions, which have been developed on the basis of industrial and IoT requirements. For example, our solution for secure and isolated remote access to industrial plants and systems has been declared to be innovative by our customers. Furthermore, we support and advise you in the planning and implementation processes of your security concepts. In our in-house training centre - the sematicon academy - we aim at qualifying employees in all relevant IT security areas. Thus, we offer comprehensive security services for the industrial and electronics sectors from a single source.

Links:

Similar Presentations: