"Rickard Bondesson" <rickard.bondesson at iis.se> wrote on 06/30/2009 01:33:21 PM: > We should do the hashing in the host and not via an HSM. What do you > think of that? Then we would only need to do signing and key > generation in the hsm. I agree Roy