Hardware Security Module (HSM)

A Hardware Security Module is a dedicated, tamper-resistant device that generates, stores, and uses cryptographic keys inside a sealed boundary. The keys never leave the device in usable form. Signing happens on-board: you send the HSM a message and an operator's authorization; it returns a signature.

HSMs are the traditional-finance security primitive. The card payment industry has an HSM standard of its own, and the Baseline Requirements for public certificate authorities make every CA keep its signing key in a device validated to FIPS 140 Level 3 or Common Criteria EAL 4+, which is to say an HSM. The features come from the FIPS 140 certification levels (140-3 now; the last 140-2 certificates moved to NIST's historical list in September 2026): tamper-evident enclosures, role-based access control, and at the higher levels tamper detection that wipes the keys on intrusion. Serious deployments add quorum rules, so no single operator can sign alone.

In Bitcoin, HSMs sit under many large custodial operations: exchange cold storage, regulated custodians, corporate treasuries. Square published the design of its own: FIPS-certified HSMs hold the keys for its bitcoin reserve offline, moving funds out takes a multi-party signing ceremony, and the HSMs refuse to sign to any address the company doesn't own. The natural pattern is a multisig wallet where each cosigner key lives in a separate HSM under separate operational control, so no single HSM compromise (or operator collusion) is enough to move funds.

The cost is real. A single cloud HSM rents for $1.60 an hour at list price, about $14,000 a year, and that is before the operational team to run it. They're aimed at institutions where regulatory compliance demands them and where the secured value justifies the overhead.

For individuals, a hardware wallet is the consumer-grade equivalent. Same idea (keys never leave the device, signing happens on-chip), much smaller threat model, vastly lower cost. The difference between a hardware wallet and an HSM is mostly the certification regime, the physical-security guarantees, and the multi-party access controls.