← Back to the reading view
Slides · 10 slides
Key ceremonies and the HSM key hierarchy: where every payment key comes from
The same use case told visually, ready to present. Speaker notes carry the full explanation.
Key Management
Key ceremonies and the HSM key hierarchy
Where every payment key comes from, and how one master key protects the rest
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today1 / 10
Split knowledge
Halves are not split knowledge
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today2 / 10
Worked example
Loading a key from three components
Each custodian checks their own KCV; only the HSM ever holds K
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today3 / 10
Key check values
Confirm a key without revealing it
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today4 / 10
Parity
Why ceremonies like an odd number of components
Parity bits are ignored by DES, so fixing them never changes the KCV
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today5 / 10
The ceremony
The real output is evidence
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today6 / 10
Hierarchy
One master key protects all the others
Every other key is stored outside the HSM, encrypted under the LMK
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today7 / 10
One working key
Cryptograms change, the KCV never does
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today8 / 10
Key separation
From variants to key blocks
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today9 / 10
Rotation
LMK rotation is a translation job
Counterparties never notice; replacing a ZMK needs both sides
Key ceremonies and the HSM key hierarchy: where every payment key comes from · Classical Crypto Today10 / 10
1 / 10
Keys: ← → move, F full screen, G all slides, N notes