[openssl-dev] Protecting SSL/TLS session keys into secure device/memory

[abhay upadhyay]

Hi,

Is it possible to protect the SSL/TLS session keys generated during
handshake into some secure device or memory?

I have some basic information about OpenSSL Dynamic Engine, and have
written a small proof of concept code to protect the RSA private key using
dynamic engine. I do not understand how to use dynamic engine to protect
the session keys.

Please guide me in right direction.

Any suggestion is highly appreciated.


Thank you
Abhay Upadhyay
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20151011/5f03ea28/attachment.html>