[throwawaaarrgh]

One guy named Jeff and his boss Clem have access to an offline PC with some signing software in a closet behind a badged door. Not TEMPEST secure unless they have govt contracts. For hardware stuff it might be at the factory.

[ShredKazoo]

Thanks, interesting.

I don't see how TEMPEST is relevant?

[throwawaaarrgh]

I mean, if you don't want state actors to steal your super secret keys, maybe secure the power lines and RFI

[ShredKazoo]

I searched on Google for RFI, not sure what it stands for?

[wyldfire]

I believe that RFI here is "RF interference." Here's links to learn more about the references above [1] [2].

[1] https://en.wikipedia.org/wiki/Tempest_(codename)

[2] https://en.wikipedia.org/wiki/Van_Eck_phreaking

[throwawaaarrgh]

Yep. It is pretty trivial to extract encryption keys via either control of voltage or detection of electromagnetic radiation emanating from a server