Show HN: Picohsm, a $5 open-source hsm

https://www.picokeys.com/pico-hsm/

by nimbius • 2 years ago

50 16 2 years ago

Valodim• 2 years ago

Average operation time for a rsa2048 operation 124 seconds...? It's that fast enough for some use cases?

cipherboy2• 2 years ago

As an example, an offline PKI root backed by a picohsm would be fast enough, given intermediates aren't typically minted that frequently.

01HNNWZ0MV43FF• 2 years ago

If it's offline, couldn't I use any other uc or PC?

glitchc• 2 years ago

The Raspberry Pico is plenty powerful. Why does it take that long?

Mic922• 2 years ago

This is just for generation of keys not for encrypting/decrypting, which is the common operation for fido/openpgp, I would say.

Mic922• 2 years ago

Also for elliptic curve it seems to be much faster, which is what most people might use these days.

brunoqc• 2 years ago

If you use git-maintenance with a cronjob, and you like that the device ask you each time for more security, how do can you tell that the request is from git-maintenance?

gnabgib• 2 years ago

You're a high-rep user, but this doesn't appear to be a valid Show HN[0] (unless you're Pol Henarejos)

  Show HN is for something you've made that other people can play with.
  The project must be something you've worked on personally and which you're around to discuss.

[0]: https://news.ycombinator.com/showhn.html

nimbius• 2 years ago

Oh I surely didnt make it, just thought it was cool is all. Sorry about that.

vbezhenar• 2 years ago

I don't think rp2040 has any protected storage. HSM is supposed to store keys securely, so even with physical access an attacker would require very advanced methods to extract keys. With typical raspberry pi's, all you need is to connect to the SPI flash and you'll get access to all its contents.

May be I didn't understand something about this project.

Also 124 seconds for RSA2048 sounds awfully slow. Is rp2040 really THAT slow? I feel something's wrong here.

Anyway it's a nice project!

kam• 2 years ago

It says it encrypts the SPI flash with a PIN provided over USB on every boot...but if you can trust the host to store/handle the PIN, why can't the host do the rest of the cryptography too?

ctz• 2 years ago

AIUI the RP2040 has -- as a deliberate design choice -- no security features: no secure boot, and no debug protection. That means it is incapable of offering any firmware integrity, or keeping any data secret at runtime.

er4hn• 2 years ago

This looks really nice as a hobbyist project. That being said - I can't see this being usable in an enterprise space. There's no TPM requirement so someone able to get access to the HSM could dump the keys from memory.

The worst part of using HSMs in enterprise env's is when you're forced to use something certified for FIPS 140 Level 2 or 3 requirements.. Then you're paying for what amounts to a shiny foil "anti-counterfeit / tamper-evident" sticker. This could probably easily meet level 1 via a certified openssl module, but alas, with most enterprise HSMs you're not paying for the _HSM features_.

gchadwick• 2 years ago

This looks like a nice piece of work but worth noting that as it uses a stock RP2040 Pico board any hardening against physical attacks will be done purely in software so cloning the HSM entirely or extracting keys may not be too complex for an attacker. Hardening against physical attackers and significant resistance against them is normally seen as a key component of an HSM.

Indeed from a very quick glance at the source, it's using the mbedtls library (from arm) and I think this is an unmasked implementation. This means key extraction, if you have physical access to the device, will be trivial.

josephcsible• 2 years ago

PKI Attestation for every key generated in the device

Either that attestation is meaningless and can be easily faked, or this is only as open-source as the TiVo was. Looking around a bit, it looks like it's the former.

Show HN: Picohsm, a $5 open-source hsm

Related Stories