Hardware security module firmware update

A non-transitory machine-readable medium having machine-readable instructions comprising a firmware verifier, the machine-readable instructions for the firmware verifier being executable by a processor core to perform operations comprising:

• requesting verification of a first signature of a firmware package for a hardware security module (HSM) by the HSM, wherein the HSM uses a public key of a public-private key pair to verify an integrity of the firmware package;
• extracting an encrypted augmented firmware image from the firmware package responsive to an indication from the HSM that the first signature is verified;
• requesting decryption of the encrypted augmented firmware image by the HSM, wherein the HSM uses a symmetric key to provide a decrypted augmented firmware image in response to the request for decryption;
• and
• transferring the decrypted augmented firmware image to the HSM, wherein the decrypted augmented firmware image includes a second signature that is verifiable with the public key.

A system comprising:

• a hardware security module (HSM) storing updatable firmware;
• a non-transitory memory having machine-readable instructions;
• and
• a processor core that accesses the non-transitory memory and executes the machine-readable instructions, the machine-readable instructions comprising a firmware verifier being executable by the processor core to perform operations comprising:
• requesting verification of a first signature of a firmware package for the HSM by the HSM, wherein the HSM uses a public key of a public-private key pair to verify an integrity of the firmware package;
• extracting an encrypted augmented firmware image from the firmware package responsive to an indication from the HSM that the first signature is verified;
• requesting decryption of the encrypted augmented firmware image by the HSM, wherein the HSM uses a symmetric key to provide a decrypted augmented firmware image in response to the request for decryption;
• and
• transferring the decrypted augmented firmware image to the HSM;
• wherein the decrypted augmented firmware image is written to an HSM firmware region responsive to the transferring;
• wherein the HSM includes a firmware updater being executable by the HSM to perform operations, the operations for the firmware updater comprising:
• verifying a second signature in the decrypted augmented firmware image to verify an integrity of a firmware image of the decrypted augmented firmware image using the public key.