SECAI Core · phase 10 of 15 · noun
Hardware security module
An appliance for generating and storing cryptographic keys. This sort of solution may be less susceptible to tampering and insider threats than software-based storage.
The Explain card
- Plain English
- An HSM is a dedicated, tamper-resistant device that generates, stores, and uses cryptographic keys. Keys never leave the hardware; applications ask the HSM to sign or decrypt on their behalf.
- Example
- A model vendor signs released model weights with a private key held in an HSM. Even a compromised build server cannot export the key to forge a signature on a backdoored model file.
- Why it matters
- Software key storage is one memory dump or one rogue admin away from theft. HSMs give AI pipelines a hardened anchor for signing artifacts, encrypting datasets, and protecting API secrets.
- Hook
- A vault that does the math inside, so the key never steps outside.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
The payment gateway sends each PIN-verification request to a hardware security module before forwarding the card authorization message.
Why these words
- hardware English hard plus ware specifies the physical implementation
- security Latin securitas, freedom from care identifies the phrase's protective domain
- module Latin modulus, small measure serves as the head noun for a specialized system unit
Where it came from
- Origin
- an English compound formed from hardware, security, and module
- Entered the language
- 1970s
- What changed
- Hardware shifted from metal goods to physical computer components, security from freedom from care to protection, and module from a small measure to a self-contained system unit.
How it is spelled
- Pattern
- hardware is written as the closed compound hard plus ware
- Pattern
- security drops the final e of secure before the suffix -ity
- Pattern
- hardware security module is normally written as an open, lowercase compound
Spelled like
- software
- firmware
- purity
- obscurity
Broken into chunks
-
hard
- harden
- hardship
-
ware
- software
- firmware
-
secur
- secure
- securely
-
modul
- modular
- modularity
What it sits beside
Same subject
- key management system
- trusted platform module
- secure cryptoprocessor
- public key infrastructure
Same shape
cryptographic hardware
- hardware security module
- trusted platform module
- smart card
Where it sits in the deck
Phase 10: Identity, Access, and Cryptographic Foundations
Before examining threats to systems, establish the foundational security primitives — identity, authentication, authorisation, and the cryptography underpinning them.