Has anybody seen my keys? A key-hierarchy strategy for rack-level security

Oxide Computer Company has published a new Request for Discussion (RFD) detailing a robust key-hierarchy strategy designed to enhance security at the rack level. The document outlines a comprehensive approach to managing cryptographic keys within a distributed hardware environment, addressing the complexities of securing infrastructure where physical access and remote management intersect. By implementing a multi-tiered key hierarchy, Oxide aims to provide a scalable and secure framework that ensures data integrity and authentication across their rack-scale systems. This proposal focuses on minimizing the blast radius of potential security compromises by isolating keys at different levels of the system architecture. The technical documentation provides insights into how modern data centers can better manage secrets and identity in a hardware-centric model, emphasizing the importance of hardware-rooted trust in cloud infrastructure design. This initiative reflects Oxide's ongoing commitment to transparent, open-source hardware and software engineering practices.