[Opendnssec-develop] Sun SCA6000 on Ubuntu

[roy at nominet.org.uk]

Jakob Schlyter <jakob at kirei.se> wrote on 06/30/2009 01:41:54 PM:

> On 30 jun 2009, at 07.33, Rickard Bondesson wrote:
>
> > We should do the hashing in the host and not via an HSM. What do you
> > think of that? Then we would only need to do signing and key
> > generation in the hsm.
>
> are there any HSM that does not support signing only (and thus MUST do
> the hashing itself)?

I haven't seen them.... and that doesn't mean anything :-)

Roy