If you have an HSM in the loop for all authentications, why bother with hashing?...

		jnwatson on Oct 9, 2017 \| parent \| context \| favorite \| on: Crypto Anchors: Exfiltration Resistant Infrastruct... If you have an HSM in the loop for all authentications, why bother with hashing? Just encrypt the password database with the HSM and be done with it. There are cheaper ways of keeping secrets secret. Using a TPM on the server would be one way. SGX would be another.