freebsd-security Digest, Vol 412, Issue 2

thetollingbell at lavabit.com thetollingbell at lavabit.com
Sun May 13 13:23:27 UTC 2012


<p>&nbsp;</p><p>&nbsp;</p><dev3_jjy>From my Android phone on T-Mobile. The first nationwide 4G network.</dev3_jjy>

<br/><br/><font><br><br>------ Original Message ------</font><br/><br>
<div><blockquote dir=ltr style=MARGIN-RIGHT: 0px><font>From : freebsd-security-request at freebsd.org</font><br><font>To : freebsd-security at freebsd.org;</font><br><font>Sent : 5/13/2012 8:02 AM</font><br><font>Subject : freebsd-security Digest, Vol 412, Issue 2</font><br>&nbsp;<div><font><pre>Send freebsd-security mailing list submissions to
	freebsd-security at freebsd.org

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.freebsd.org/mailman/listinfo/freebsd-security
or, via email, send a message with subject or body 'help' to
	freebsd-security-request at freebsd.org

You can reach the person managing the list at
	freebsd-security-owner at freebsd.org

When replying, please edit your Subject line so it is more specific
than &quot;Re: Contents of freebsd-security digest...&quot;


Today's Topics:

 &nbsp;&nbsp;1. HSM in Freebsd (mahdieh salamat)
 &nbsp;&nbsp;2. HSM in FreeBSD (mahdieh salamat)
 &nbsp;&nbsp;3. HSM in FreeBSD (mahdieh salamat)
 &nbsp;&nbsp;4. Re: HSM in FreeBSD (Matthew Seaman)


----------------------------------------------------------------------

Message: 1
Date: Sat, 12 May 2012 22:37:28 -0700
From: mahdieh salamat&nbsp;<mahdieh.salamat at gmail.com>
Subject: HSM in Freebsd
To: freebsd-security at freebsd.org
Message-ID:
	<CAL5m1BvnZdNyOG5wDoO_oZi3aVa4aKuDPSLwFdiMoGdjbqfU1A at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

Hi all. I want to use a HSM pc card for security in my system. Can I use it
in FreeBSD? FreeBSD support this cards?
Thanks


------------------------------

Message: 2
Date: Sat, 12 May 2012 22:58:04 -0700
From: mahdieh salamat&nbsp;<mahdieh.salamat at gmail.com>
Subject: HSM in FreeBSD
To: freebsd-security at freebsd.org
Message-ID:
	<CAL5m1BvySGzf8PR9=WYxssyPysvzbFTMtu4v1HU1wN_DNyC=AA at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

Hi all. I want to use a HSM pc card for security in my system. Can I use it
in FreeBSD? FreeBSD support this cards?
Thanks


------------------------------

Message: 3
Date: Sat, 12 May 2012 23:07:06 -0700
From: mahdieh salamat&nbsp;<mahdieh.salamat at gmail.com>
Subject: HSM in FreeBSD
To: freebsd-security at freebsd.org
Message-ID:
	<CAL5m1Bt6Vw1vTiH0Ohi3bMwJffaGWj95Agb-0RBrkoCxmReLYw at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

Hi all. I want to use a HSM pc card for security in my system. Can I use it
in FreeBSD? FreeBSD support this cards?
Thanks


------------------------------

Message: 4
Date: Sun, 13 May 2012 08:39:07 +0100
From: Matthew Seaman&nbsp;<matthew at FreeBSD.org>
Subject: Re: HSM in FreeBSD
To: mahdieh salamat&nbsp;<mahdieh.salamat at gmail.com>
Cc: freebsd-security at FreeBSD.org
Message-ID: &lt;4FAF651B.6090407 at FreeBSD.org&gt;
Content-Type: text/plain; charset=&quot;iso-8859-1&quot;

On 13/05/2012 06:58, mahdieh salamat wrote:
&gt; Hi all. I want to use a HSM pc card for security in my system. Can I use it
&gt; in FreeBSD? FreeBSD support this cards?

I take it you mean a 'Hardware Security Module' and not 'Hierarchical
Storage Management' ?

You'ld have to tell us the make and model number of the card (ideally
with pointers to the manufacturers website showing technical specs if
you can.) &nbsp;Hardware is not generally supported by specific function, but
per manufacturer or per chipset. &nbsp;Also, there's no guarantee that all
the functions of a particular card are supported, but once we've pinned
down what drivers etc. will be used for that hardware, the documentation
should cover that.

Having said that, I believe that OpenSSL provides an API for accessing
many of these sorts of devices, so if OpenSSL supports it, then you're
probably in luck. &nbsp;A keyword here is 'cryptoki' (meaning cryptographic
token interface) -- that's the standard that OpenSSL implements.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.
PGP: http://www.infracaninophile.co.uk/pgpkey


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 267 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20120513/f3a3a1c2/signature-0001.pgp

------------------------------

_______________________________________________
freebsd-security at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to &quot;freebsd-security-unsubscribe at freebsd.org&quot;

End of freebsd-security Digest, Vol 412, Issue 2
************************************************
</pre></font></div></blockquote></div>


More information about the freebsd-security mailing list