Show HN: AcceSSL: a "soft HSM" for OpenSSL to secure private keys (github.com)

7 points by gozdal 12y ago ↗ HN

4 comments

[ 4.6 ms ] story [ 18.0 ms ] thread

wmf 12y ago ↗

It would be interesting to compare this with factotum. http://plan9.bell-labs.com/plan9/factotum.html

As far as I can see factotum is used for authenticating users into the system. AcceSSL allows you "only" to store RSA private keys on a separate machines/machines without storing them on Internet-facing server handling SSL.

reedloden 12y ago ↗

Neat idea with good potential, but Affero GPL just means nobody realistically is going to use it. :/

reedloden 12y ago ↗

1024-bit RSA key is not a good test, as both NIST and CABForum policy require at least 2048-bit for RSA private keys used in SSL certificates. What is the performance with that size? or even 4096-bit?

What about ECC keys?