Discussion
What if this #emudhra apocalypse isn't just a failure of a single CA, but rather a bug in common HSMs?
The CA says all their keys are generated within an HSM: WHICH ONE??
I _must_ know the manufacturer, model and software version!
Edit: It is Utimaco Se-Series Gen2
@fluepke They are listed as technology partner here: https://utimaco.com/partners/emudhra
@kiliange Utimaco split some months ago into two companies. Now I need to find out which part holds the HSM business…
@waldi AIUI, the HSM business is still in their own hands, and the Awful Interception part was sold:
https://utimaco.com/news/press-releases/invision-and-pinova-acquire-utimacos-lawful-interception-business
Install Fedizen
Get the full app experience
@fluepke At least each of those single bytes is FIPS certified. 📜🧐
I'll happily read the post-mortem.
Edit/Q:
Where do they actually state that it's the Utimaco Se-Series Gen2?