PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cloud cryptography demystified: Amazon Web Services

blog.trailofbits.com | blog | #cloud | #cloud-security | #aws | #cryptography | #encryption | #key-management | #hsm | #kms
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits explains AWS cryptography offerings—KMS, CloudHSM, the AWS Encryption SDK, Secrets Manager, and C3R—clarifying service versus client-side tooling and when to use each.
Published
Collected

Related coverage

blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · blog.trailofbits.com
Don't let TEEs break your MPC
Combining threshold signatures with trusted execution environments (TEEs) can strengthen MPC deployments, if the TEE serves as a defense-in-depth layer rather than a substitute for a sound protocol.
blog · blog.trailofbits.com
A few notes on AWS Nitro Enclaves: KMS integration
The third post in Trail of Bits' Nitro Enclaves series catalogs passive and active attacks against the enclave-KMS channel, plus operational risks that persist even when cryptography is correct.
blog · blog.trailofbits.com
Safer cold storage on Ethereum
Exchanges can use Ethereum smart contract programmability to build cold storage that stays secure even when multisig keys are compromised, via role-separated signing, timelocks, and rate limiting.
blog · blog.trailofbits.com
Maturing your smart contracts beyond private key risk
Private key compromise drove 43.8% of 2024 crypto hack losses. This post offers a four-level access-control maturity model, from single EOA control to multisigs, timelocks, and radical immutability.
Back