Armored Core of PKI: Remove Signing Keys for CA via Physically Unclonable Function

arXiv:2404.15582v1 Announce Type: new
Abstract: The protection of CA's signing keys is one of the most crucial security concerns in PKI. However, these keys can still be exposed today by human errors or various carefully designed attacks. Traditional protections like TEE and HSM fail to eliminate this risk since they can be bypassed by skilled attackers. This dilemma motivates us to consider removing CA' signing keys and propose Armored Core, a PKI security extension applying the physically trusted binding provided …

arxiv attacks can cs.cr errors exposed fail function hsm human keys pki protection remove security security concerns signing today