Stories and Papers

Creating a full life-cycle digital asset management solution, that would meet the highest security, availability, and regulatory standards, following the example of the financial sector of its home country Switzerland.

This workflow engine combined with other capabilities of Securosys Hardware Security Modules, provides protection superior to that of the traditional Multi-signature or secure Multi-Party Computation.

Decanus allows easy and cost-effective management of your HSMs without compromising security. The Remote Control Terminal allows you to manage up to 64 Primus HSMs in different locations worldwide - or it can manage only one partition on the Primus HSM without the need to turn on or trust the HSM administration.

The new Securosys Key Attestation feature provides cryptographic verification of the key and its attributes with a chain of trust originating from our root certificate. This allows to automate the key ceremony audit process, and to issue trusted digital identity keys at virtually limitless scale. 

We take a look at different technologies and methods available for custodial platform, ranging from open-source cold-storage standards using on-chain multi-signature schemes, through Secure Multi-Party Computation to Hardware Security Modules by both legacy manufacturers and Securosys.

We also explore advantages and shortcomings of Hardware Security Modules, how they must evolve to keep up with the paradigm change introduced by cryptocurrencies to help us understand how to lead that change.

We take a look at different security concerns concerning the distributed ledger technology and how to best protect both the blockchain applications and the cryptographic keys that allow access to the ledgers themselves.

Furthermore, we explore the benefits of blockchain vs software based-security and how augmenting server infrastructures, mobile devices, and digital wallets with Smart Key Attributes (SKA) individual investors, traders, and systems architects can allow strict separation of security and business application functionalities.

Roman Willi, Andreas Curiger, and Paul Zbinden, “On Power-Analysis Resistant Hardware Implementations of ECC-Based Cryptosystems.”

In 2016 Euromicro Conference on Digital System Design, DSD 2016, pages 665-669. IEEE Computer Society, 2016.

Amiet, Dorian; Curiger, Andreas; Leuenberger, Lukas; Zbinden, Paul: "Defeating NewHope with a Single Trace."

In: Post-Quantum Cryptography, 2020

Amiet, Dorian; Curiger, Andreas; Zbinden, Paul: "FPGA-based Accelerator for Post-Quantum Signature Scheme SPHINCS-256."

In: IACR Transactions on Cryptographic Hardware and Embedded Systems, 1, 2018

Dorian Amiet, Lukas Leuenberger, Andreas Curiger, and Paul Zbinden, “FPGA-based SPHINCS+ Implementations: Mind the Glitch.”

In 2020 Euromicro Conference on Digital System Design, DSD 2020.

Link will follow later (publication at conference in 2020)