Re: Crypto HW Requirements (why it is out of scope) from Ron Garret on 2011-11-23 (public-identity@w3.org from November 2011)

From: Ron Garret <ron@flownet.com>
Date: Wed, 23 Nov 2011 07:17:41 -0800
To: Richard L. Barnes <rbarnes@bbn.com>
Cc: Anders Rundgren <anders.rundgren@telia.com>, "public-identity@w3.org" <public-identity@w3.org>
Message-Id: <85BDB070-304D-43C3-AB10-FC58CCFD3941@flownet.com>

On Nov 23, 2011, at 7:08 AM, Richard L. Barnes wrote:

> Hey Anders,
> 
> Couple of observations:
> 
>> The main point with crypto hardware is strong protection of secret/private keys, right?
> 
> I don't think that's quite right.  Protection of private keys is certainly a very important function of HSMs, but they also provide validated implementations of cryptographic algorithms.

And, potentially, true (not pseudo) random numbers.

rg

Received on Wednesday, 23 November 2011 17:30:17 UTC