Marvell, Microsoft and Oracle start OCP group for server HSMs
Original title: Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
They want a FIPS 140-3 Level 3 module so cryptographic keys stay inside the server.
Marvell, Microsoft, and Oracle said on October 13 that they formed an Open Compute Project working group to standardize an integrated hardware security module for cloud and hyperscale servers. The specification would handle key caching and cryptographic operations inside a certified hardware boundary on the server. The companies contrast that with network-attached HSMs and software-only key storage. Marvell said the result should be an open industry specification.
- The new group sits under the Open Compute Project Security Track.
- Many servers today send keys across the network or store them outside Level 3 memory.
- The charter covers secure key caching and key lifecycle management at the server.
- Organizations
- Open Compute ProjectNIST
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 7c184611bdd9df51982cc5bb2d5ba649 | vest-cloud-credentials#recipe=similar-items&sourcecontentid=7c184611bdd9df51982cc5bb2d5ba649) APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud |
| md5 | 8f99d4e59eef3c1106085563b00071e8 | t-mythos-exploit-storm#recipe=similar-items&sourcecontentid=8f99d4e59eef3c1106085563b00071e8) CSA: CISOs Should Prepare for Post-Mythos Exploit Storm b |
| md5 | dedc2d87d0611657e649f3ccd3b03e96 | rastructure-crime-bots#recipe=similar-items&sourcecontentid=dedc2d87d0611657e649f3ccd3b03e96) TeamPCP Turns Cloud Infrastructure Into Crime Bots by Jai |
| md5 | e89675326c5a58c3d1742cab0ff9c2e8 | ts-power-offensive-ops#recipe=similar-items&sourcecontentid=e89675326c5a58c3d1742cab0ff9c2e8) Attackers Seize Exposed AI Endpoints to Power Offensive O |
From the original article
6 min read at darkreading.com
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.