Protection for Cryptographic Keys With the World’s Smallest Hardware Security Module (HSM)
Protection for Cryptographic Keys With the World’s Smallest Hardware Security Module (HSM)
2 PagesYubiHSM 2 and YubiHSM 2 FIPS protect cryptographic keys in tamper-resistant hardware instead of vulnerable software storage. The FIPS version is validated to FIPS 140-3 Level 3, while both versions use a compact USB-A “nano” design intended to provide HSM security without the size, cost, and deployment complexity of traditional appliances. Capabilities include secure key generation and storage, hashing, key wrapping, asymmetric signing, decryption, attestation, audit logging, and secure backup. The open-source YubiHSM 2 SDK supports integration through PKCS#11, KSP, and native libraries. Use cases include servers, applications, databases, cryptocurrency exchanges, IoT environments, cloud infrastructure, BYOK for multi-cloud deployments, and Microsoft Active Directory Certificate Services.
