1 of 12

Hardware Security Module Requirement

for High Assurance Credentials

Wallet Interoperable SIG

2 of 12

Demand for strong customer authentication

Anti-Money Laundering Act

  • Opening bank accounts
  • crypto asset services

​

Approved methods

  • eID (plastic card)
  • Video Identification
  • QES

​

​

2

LoA high requirement by national law, not from the eIDAS

3 of 12

Evaluation at FUNKE

3

4 of 12

Key storage

4

5 of 12

Relevant standards

ISO 29115

  • Defines LoA for authentication
  • LoA 3&4: HSM

​

FIPS 140-3

  • Security level for cryptographic modules

​

Common Criteria

  • EAL4+/EAL5+: Security evaluation of HSMs

5

6 of 12

TPM vs HSM

6

Feature

TPM

HSM

Primary Purpose

Device security

Cryptographic security

Costs

Low

Expensive

Use Case

Single Device

Enterprise-wide

Scope

Local

Cloud

Security level

Basic

High

Tamper Resistance

Limited

Strong

Performance

Low

High

7 of 12

eID on Smartphone in Germany (2020)

Available devices 2020

  • Galaxy S20 999,99$
  • Galaxy S20+ 1,999,99$
  • Galaxy S20 Ultra 1,399,99$

​

Security Chip

  • Model S3K250AF, CC 5+ certification (Feb)
  • Model S3FV9RR, CC 6+ certification (May)

7

8 of 12

What about other vendors?

Google Titan M2 security chip: EAL4+ certified

  • Pixel 6,7,8,9

​

Samsung: Knox

​

Lack of certification

​

​

​

8

9 of 12

HSM as a service

Thales Luna 7 HSM A790

  • 20,000 ECC P256 OPS

​

Azure

  • 3,600$/Month

​

​

9

Certification

  • FIPS 140-2 Level 3 Validated – Password and Multi-Factor (PED)
  • FIPS 140-3 Validated – Password and Multi-Factor (PED)
  • Common Criteria EAL4+ (AVA_VAN.5 and ALC_FLR.2) Certified against the Protection Profile EN 419 221-5
  • Listed as Qualified Signature or Seal Creation Device (QSCD for either remote or local signing as part of an eIDAS compliant deployment)
  • NIST SP 800-90 A/B/C Certified

​

10 of 12

Security

https://bmi.usercontent.opencode.de/eudi-wallet/eidas-2.0-architekturkonzept/flows/PID-IssuerSigned-cloud/#credential-presentation

​

10

PIN

  • Knowledge
  • Not managed by Wallet

​

Hash

  • privacy by design

11 of 12

German government wallet

Short run: C’

  • HSM usage ONLY for LoA high credentials
  • Fast adoption
  • Only keys are in the cloud + cloud only gets the hashes to be signed

​

Middle; C’ + C

  • decentralise where possible

​

Long run: C

​

Source: https://www.youtube.com/watch?v=u1SuLBgGlxg

11

12 of 12

No Internet,

no identity

12