Techniques for creating snapshots and performing recovery of a hardware security module

A non-transitory computer-readable medium storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• performing a first-type operation of a set of operations to a first crypto key stored in a hardware security module (HSM), the first-type operation being a create operation;
• upon completion of the first-type operation to the first crypto key, storing first state information of the first crypto key resulting from the first-type operation into a first entry of a temporary storage, the first state information of the first crypto key being a created state;
• generating a first snapshot based at least in part on content stored in the first entry of the temporary storage, the content stored in the first entry of the temporary storage comprising the first state information of the first crypto key;
• generating a second snapshot based at least in part on content stored in a second entry of the temporary storage;
• and
• adding a first-type pointer pointing to the first snapshot from the second snapshot to form a linked list, the first snapshot being immediately preceding the second snapshot.

A computing system, comprising:

• one or more processors;
• and
• one or more computer readable media storing computer-executable instructions that, when executed by the one or more processors of the computing system, cause the computing system to:
• perform, by the computing system, a first-type operation of a set of operations to a first crypto key stored in a hardware security module (HSM), the first-type operation being a create operation;
• upon completion of the first-type operation to the first crypto key, store, by the computing system, first state information of the first crypto key resulting from the first-type operation into a first entry of a temporary storage, the first state information of the first crypto key being a created state;
• generate, by the computing system, a first snapshot based at least in part on content stored in the first entry of the temporary storage, the content stored in the first entry of the temporary storage comprising the first state information of the first crypto key;
• generate, by the computing system, a second snapshot based at least in part on content stored in a second entry of the temporary storage;
• and
• add, by the computing system, a first-type pointer pointing to the first snapshot from the second snapshot to form a linked list, the first snapshot being immediately preceding the second snapshot.