[openpgp] Re: ML-KEM and ML-DSA secret key format

Hi, Heiko.

> On 2 Mar 2025, at 10:37, Heiko Schäfer <[email protected]> wrote:
> 
> Separately, like Daniel, I think we should not try to support the exotic use case of exporting private key material from some other type of HSM and transforming it into OpenPGP framing. Expending format-complexity on this use case seems like a bad tradeoff to me.

Speaking as someone who has wrangled hardware HSMs on behalf of corporate clients in the past, the export format of such devices is not normally optimised for transformation into a software-backed store. The only operation normally supported is importing the blob into an identical device from the same manufacturer. I am sure it is possible to reverse-engineer an HSM exported vault to extract the secrets, but I would strongly discourage anyone (and particularly a large corporate client) from attempting to do so. Supporting such a use case in the OpenPGP spec will only encourage bad security practice IMO.

A

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

-----BEGIN PGP SIGNATURE-----
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=xfvG
-----END PGP SIGNATURE-----