Hardware security module
A hardware security module is a tamper-resistant device that generates, stores, and uses cryptographic keys while protecting them from unauthorized extraction.
Real-World Cryptography
A hardware security module is a specialized device that generates, stores, and uses cryptographic keys while protecting them from unauthorized extraction.
- How it is used
- Stores enterprise secret keys and performs cryptographic operations in data centers where throughput and physical protection matter.
- How deep it goes
- Explains form factors, interfaces, certification levels, and side-channel limits, but stops short of implementation detail.
- Examples
- Uses rack-mounted devices, PCIe cards such as the IBM 4767, and USB devices such as the YubiHSM.
- What you can do after
- Evaluate HSM choices by comparing form factor, cryptographic speed, certification claims, and required security.
Read how Real-World Cryptography explains hardware security module →
Software Security for Developers
A hardware security module is a specialized tamper-resistant device that protects cryptographic keys and performs security-sensitive cryptographic operations.
- How it is used
- Protects secrets managed by centralized credential services for applications.
- How deep it goes
- Defines the protection role of specialized hardware but does not explain HSM internals or configuration.
- Examples
- Illustrates HSM use through credential services protecting application passwords, API keys, and other secrets.
- What you can do after
- Evaluate credential-management designs by recognizing HSM support as an additional protection for centralized secrets.
Read how Software Security for Developers explains hardware security module →
Related concepts
- PKCS#11uses · PKCS#11 is a standard API specification for accessing cryptographic tokens and performing protected key and cryptographic operations.
- key management servicepart of · A key management service is a system that securely creates, stores, controls access to, rotates, and revokes cryptographic keys.
- trusted platform moduleincludes · A Trusted Platform Module is a standardized hardware security component that securely stores cryptographic material and performs protected cryptographic operations for platform integrity and authentication.
- credential storeused by · A credential store is a protected system that securely stores, manages, and supplies authentication credentials to authorized clients.
- secure elementkind of · A secure element is a hardware security component that stores secrets and performs cryptographic operations as a coprocessor in a larger system.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.