Creating a full life-cycle digital asset management solution, that would meet the highest security, availability, and regulatory standards, following the example of the financial sector of its home country Switzerland.
This workflow engine combined with other capabilities of Securosys Hardware Security Modules, provides protection superior to that of the traditional Multi-signature or secure Multi-Party Computation.
Decanus allows easy and cost-effective management of your HSMs without compromising security. The Remote Control Terminal allows you to manage up to 64 Primus HSMs in different locations worldwide - or it can manage only one partition on the Primus HSM without the need to turn on or trust the HSM administration.
Customers who opt for Primus HSM as a service do not need to trust Securosys to handle their security. Instead, they can control their partition access and security settings without any interference – even from Securosys administrator.
The new Securosys Key Attestation feature provides cryptographic verification of the key and its attributes with a chain of trust originating from our root certificate. This allows to automate the key ceremony audit process, and to issue trusted digital identity keys at virtually limitless scale.
We take a look at different technologies and methods available for custodial platform, ranging from open-source cold-storage standards using on-chain multi-signature schemes, through Secure Multi-Party Computation to Hardware Security Modules by both legacy manufacturers and Securosys.
We also explore advantages and shortcomings of Hardware Security Modules, how they must evolve to keep up with the paradigm change introduced by cryptocurrencies to help us understand how to lead that change.
Roman Willi, Andreas Curiger, and Paul Zbinden, “On Power-Analysis Resistant Hardware Implementations of ECC-Based Cryptosystems.”
In 2016 Euromicro Conference on Digital System Design, DSD 2016, pages 665-669. IEEE Computer Society, 2016.
Amiet, Dorian; Curiger, Andreas; Leuenberger, Lukas; Zbinden, Paul: "Defeating NewHope with a Single Trace."
In: Post-Quantum Cryptography, 2020
Amiet, Dorian; Curiger, Andreas; Zbinden, Paul: "FPGA-based Accelerator for Post-Quantum Signature Scheme SPHINCS-256."
In: IACR Transactions on Cryptographic Hardware and Embedded Systems, 1, 2018
Amiet, Dorian; Curiger, Andreas; Zbinden, Paul: "Flexible FPGA-Based Architectures for Curve Point Multiplication over GF(p)."
In: 2016 Euromicro Conference on Digital System Design (DSD), 2016
Dorian Amiet, Lukas Leuenberger, Andreas Curiger, and Paul Zbinden, “FPGA-based SPHINCS+ Implementations: Mind the Glitch.”
In 2020 Euromicro Conference on Digital System Design, DSD 2020.
Link will follow later (publication at conference in 2020)
