$650 is cheap?
Yup. Hsm pcie cards are around $5k, maybe more. The pizza box versions are upwards of 10k... that’s the last price I seen.
Yubico announces tiny, cheap YubiHSM 2
11–20 of 94 posts
Re: Yubico announces tiny, cheap YubiHSM 2
#12Never really touched one of these HSMs before, what happens if you're using one in production and it dies?
Re: Yubico announces tiny, cheap YubiHSM 2
#13Think there's a chance we could get a Type C key someday that's as small as that (well, literally smaller, but I'm thinking something not much larger than the shell that will stick out of my machine about as much as that Type A one does.
Re: Yubico announces tiny, cheap YubiHSM 2
#14More generally why is this not $3. Can we get a Kickstarter for this please?
Re: Yubico announces tiny, cheap YubiHSM 2
#15How much of a market is there for HSMs that are not FIPS 140-2 certified?
FIPS 140-2 is not all that it is cracked up to be these days. Older algorithms, embarrassing failures in certified products, and general distrust of NIST since the Dual EC PRNG catastrophe means that the only folks that should be using FIPS 140-2 are legally required to.
(Disclosure: I once took a hardware product through the FIPS process)
Re: Yubico announces tiny, cheap YubiHSM 2
#16Re: Yubico announces tiny, cheap YubiHSM 2
#17Earlier quoted context omitted.
For a security product for enterprise data centers, this is cheap.
I'm talking about absolute price, not relative to competitors. What's so complicated about this device to justify the cost?
High development costs (security experts don't come cheap) spread over a small amount of sold devices?
Re: Yubico announces tiny, cheap YubiHSM 2
#18Never really touched one of these HSMs before, what happens if you're using one in production and it dies?
You retrieve the backup HSM and continue on.
Re: Yubico announces tiny, cheap YubiHSM 2
#19How much of a market is there for HSMs that are not FIPS 140-2 certified?
Everybody who isn't working for us gov. It's a big market.
Re: Yubico announces tiny, cheap YubiHSM 2
#20Think there's a chance we could get a Type C key someday that's as small as that (well, literally smaller, but I'm thinking something not much larger than the shell that will stick out of my machine about as much as that Type A one does.
How many servers have you got with Type C being primary accessible/secure ports?
You realise this is the HSM and not the key right?
Yubico has a Type C Yubikey called the 4C Nano https://www.yubico.com/product/yubikey-4-series/#yubikey-4c-... of you're just looking for keys.
Though I can't see why you'd be so interested in a tiny HSM, could you tell me your use case?