Install "Hardware Wallet" for Consortium Blockchain -- Protect Hyperleger Fabric...

on YouTube ↗37m

" summary

Claim: use Intel SGX as a built-in hardware wallet alternative to HSM to keep Hyperledger Fabric node private keys inside an enclave. Implementation modifies the Go crypto layer and provides a modified BCCSP plugin that generates keys, performs signatures inside the enclave, and seals keys for durability; it also supports exporting sealed keys to an HSM for backup. It runs against Fabric 1.2/1.4 constraints, works functionally, and currently lacks signing authentication and easy key rotation.

AI-written summary · about

" chapters (11)

1. 0:00Introduction
2. 5:00Fabric BT CSP
3. 11:25BCC SP
4. 19:27Why we are launching this tool
5. 24:11Key rotation
6. 25:36Fabric key rotation
7. 27:11Fabric key reload
8. 28:11Intel CPU
9. 30:11CPU Migration
10. 32:11Sign API
11. 33:11Hardware Wallet

" related talks

• 37mInstall "Hardware Wallet" for Consortium Blockchain -- Protect Hyperleger Fabric...Mengzhe Yang · KubeCon + CloudNativeCon + Open Source Summit China 2019
• 27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...Malini Bhandaru, Iris Ding · CloudNativeSecurityCon North America 2023
• 01h 00mPrivacy Preserving Smart ContractsCan Kisagun, Frederic Fortier · Web3 Summit 2018
• 29mHardware Wallets: Finding the Balance With Security, Decentralization, and ConvenienceDouglas Bakkum, Bastien Taquet · Bitcoin Amsterdam 2025
• 53mHyperledger Fabric: The Enterprise Blockchain FrameworkArnaud J Le Hors · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 50mEnabling Hardware Security Modules for Confidential ComputingReinhard Buendgen · Linux Security Summit Europe 2024
• 50mTrusted Execution Environments Meet the BlockchainIttay Eyal · Large-Scale Consensus and Blockchains 2019
• 25mThe Future of Hardware WalletsStepan Snigirev · Breaking Bitcoin 2019