Confidential Key Management as a Service: Enhancing Availability and Isolation in Key Protection
This work introduces a confidential software-based HSM ( ccHSM) designed to provide strong isolation and scalable key management without the need for dedicated hardware, and shows that ccHSM doesn’t suffer substantial performance trade-offs while significantly reducing cost relative to conventional hardware and cloud-based solutions.