Protect your private keys with inexpensive crypto devices by Marlon Dutra

Protect your private keys with inexpensive crypto devices by Marlon Dutra Hardware security modules (HSM) have existed for a long time, however they are still considered black boxes to many sysadmins all over the world. Although large HSMs can be very expensive for small setups, there's an array of small and cheaper crypto devices that are suitable for smaller organizations. Those devices can be used for many purposes, like user authentication, certificate authorities, VPNs, signing, encryption, etc, dramatically increasing the security of private keys. During this talk, you'll learn several interesting examples about how to use $50 crypto devices for normal sysadmin operations, focusing on well known tools like OpenSSH and OpenSSL. The entire talk and examples will be around open source software. Marlon has over 22 years of experience in distributed systems, with a strong background in infrastructure, Linux systems, network and security. Marlon has worked for Facebook since 2012, where he is a Production Engineer and serves as a technical leader for the production engineering security team.