Hi I already tried out the DKEK mechanism for generating a backup of a key on another HSM. Nevertheless, we are facing some problems with our key policy: What if a Key Custodian of a n-of-m DKEK share leaves? What if n key custodians leave? Isn’t then the n-of-m scheme “theoretically” broken? As fa…

tkalkanci January 29, 2020, 2:11pm 6

'+1.

I am trying to use the XKEK mechanism, and I have not really understood how to do it…

2 Likes

[Nitrokey HSM] DKEK - keep a paper printout - really?

Key Exchange between two or more NitroKey HSM2 with XKEK