[Cryptech Tech] cryptostick

[Crypto Stick]

Am 28.02.2014 19:29, schrieb Leif Johansson:
> On 2014-02-28 19:18, Crypto Stick wrote:
>> Am 28.02.2014 19:01, schrieb Leif Johansson:
>>>> Secure key stores "server side" is a way to summarize the use-cases we're fo
>>> ocusing on
>> That sounds like a good fit. In brief, the Crypto Stick has an open
>> interface (OpenPGP Card 2.0), a tamper resistant smart card and can
>> handle up to 4096 bit long RSA keys. Any other specific feature you
>> would be interested in?
>>
> 
> Let me turn the question around: what features from an opensource/open
> hardware HSM would you need?

I understand Cryptech is going to be a crypto chip providing
server-level performance (other than a small smart card). You could use
the Crypto Stick to securely store the actual keys (of whatever
algorithm) being used by encrypting them with the RSA keys of the Crypto
Stick. During startup the user would enter his/her password to unlock
the Crypto Stick (and the actual keys, subsequently). Is this what you
are aiming for with the YubiKey?