HLS (Hardware Security Level)

Термин используется в разных контекстах: HLS streaming (Apple) и HSM security levels. Здесь фокус на security контексте.

HSM FIPS уровни

FIPS 140-2 Level 1: basic. Level 2: physical tamper-evidence. Level 3: tamper-resistant с identity-based auth. Level 4: envelope protection. Gaming operators часто требуют Level 3.

Применение

Master key storage. Signing keys для JWT. Payment key management. Provably fair signing. PCI DSS требования для card data. Certified per jurisdiction gaming labs.

Providers

Thales Luna: enterprise. AWS CloudHSM: managed. Azure Dedicated HSM. Utimaco: European. YubiHSM: startup-friendly. Cost $1K/год для entry-level до $100K+ enterprise.

Integration

PKCS#11 standard. Java JCE. KMIP protocol. Custom SDKs vendor-specific. Latency 5-50ms per operation. Design для отсутствия single point of failure.