uses RSA-2048 encryption and SHA256 hashing to generate signed firmware images. The process includes digest generation, private key encryption, and signature merging with a public key into a firmware image packet. This ensures that firmware can be authenticated at runtime.<\/span><\/p>\n[\/et_pb_toggle][et_pb_toggle _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” title=”What security certifications does Phison\u2019s HSM meet?” sticky_enabled=”0″]<\/p>\n
Phison\u2019s HSM implementation complies with:<\/span><\/p>\n\n- FIPS 140-2 Level 3<\/span><\/b>, a U.S. government standard for cryptographic modules.<\/span>\u00a0<\/span><\/li>\n
- Common Criteria EAL4+<\/span><\/b>, an international standard for IT product security certification.<\/span>\u00a0
These certifications ensure the highest levels of trust and compliance.<\/span>\u00a0<\/span><\/li>\n<\/ul>\n[\/et_pb_toggle][et_pb_toggle _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” title=”What is the difference between code signing and digital signatures?” sticky_enabled=”0″]<\/p>\n
Code signing refers to the overall process of securing firmware using digital certificates. Digital signatures are a specific cryptographic mechanism used within this process to confirm the identity of the firmware source and verify its integrity. Together, they ensure trusted firmware execution.<\/span><\/span><\/p>\n[\/et_pb_toggle][et_pb_toggle _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” title=”Why is RSA-2048 used for code signing instead of a shorter key length?” sticky_enabled=”0″]<\/p>\n
RSA-2048 offers a strong balance between security and performance. It is widely accepted in enterprise security policies and provides sufficient protection against brute-force attacks. Shorter key lengths like RSA-1024 are no longer considered secure for critical systems.<\/span><\/span><\/p>\n[\/et_pb_toggle][et_pb_toggle _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” title=”How does code signing prevent unauthorized firmware updates?” sticky_enabled=”0″]<\/p>\n
During the boot or update process, the SSD checks the firmware\u2019s digital signature against the stored public key. If the signature does not match or the firmware is altered, the SSD rejects the firmware. This prevents hackers from loading rogue firmware to steal or corrupt data.<\/span><\/span><\/p>\n[\/et_pb_toggle][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
SSDs have gained a home both in small-scale personal computers and hyper-scale data centers such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform (GCP). SSDs are used to store huge databases with trillions of confidential files and user data. System administrators want help from SSD manufacturers in keeping these files safe. That is […]<\/p>\n","protected":false},"author":8,"featured_media":4868,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[23,3,110],"tags":[22],"class_list":["post-4861","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-all-posts","category-enterprise","category-security","tag-long-content"],"acf":[],"_links":{"self":[{"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/posts\/4861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/comments?post=4861"}],"version-history":[{"count":2,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/posts\/4861\/revisions"}],"predecessor-version":[{"id":86458,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/posts\/4861\/revisions\/86458"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/media\/4868"}],"wp:attachment":[{"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/media?parent=4861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/categories?post=4861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/phisonblog.com\/de\/wp-json\/wp\/v2\/tags?post=4861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"https:\/\/phisonblog.com\/wp-content\/uploads\/2021\/08\/Secure-Erase-of-Data-Stored-on-SSD.jpg\")