HSM
Hardware security module
A tamper-resistant device or service that generates, stores and uses cryptographic keys so that private keys cannot be exported in plaintext; its FIPS 140-3 validation level states how much physical and logical protection it provides.
Covered in
Guide
Envelope encryption and key rotation: data keys, KMS keys and backups
Encrypt each record with its own data key, wrap that key in a KMS or HSM key, and keep wrapping-key rotation, data re-encryption, key deletion and restored backups as separate, tested operations.
Guide
Design firmware updates that can recover safely
Connect trusted boot, update authorization, rollback policy and end-of-life behavior to the device’s actual failure modes.
Practice: Local project: Bind ciphertext to the correct record · Local project: Recover from failed firmware updates with A/B slots