--- title: Dynamic Benchmarking Blog | Jeremy Spilman description: Dynamic Benchmarking Association Blog --- [![Stacked Logo color icon](https://blog.associationbenchmarking.com/hs-fs/hubfs/Stacked%20Logo%20color%20icon.png?width=277&height=81&name=Stacked%20Logo%20color%20icon.png)](http://www.dynamicbenchmarking.com)   # Stacked Up ## Jeremy Spilman ## Recent Posts ## [So what is the answer for those who can't afford or want an alternative to HSM's?](https://blog.associationbenchmarking.com/news/so-what-is-the-answer-for-those-who-cant-afford-or-want-an-alternative-to-hsms) November 27, 2018 / by [Jeremy Spilman](https://blog.associationbenchmarking.com/news/author/jeremy-spilman) posted in [BlindHash Technology](https://blog.associationbenchmarking.com/news/topic/blindhash-technology), [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) [0 Comments](https://blog.associationbenchmarking.com/news/so-what-is-the-answer-for-those-who-cant-afford-or-want-an-alternative-to-hsms#comments-listing) BlindHash Cyber Protection is similar to an HSM in some ways -- both are an additive layer of security to protect crucial secrets, even if an attacker is able to access the database. But the BlindHash approach is quite different. Instead of playing the same game of trying to hide a tiny secret key from an attacker, we protect secrets with our patented data pool model. With BlindHash, an attacker would have to physically steal the entire data pool off our servers. Just based on the physics of the size of the pool versus the speed of the network, this process becomes easy to detect and easy to defend against. [Read More](https://blog.associationbenchmarking.com/news/so-what-is-the-answer-for-those-who-cant-afford-or-want-an-alternative-to-hsms) [![](https://blog.associationbenchmarking.com/hubfs/black%20box%20hsm.png)](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms) ## [An Alternative to HSMs?](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms) November 27, 2018 / by [Jeremy Spilman](https://blog.associationbenchmarking.com/news/author/jeremy-spilman) posted in [BlindHash Technology](https://blog.associationbenchmarking.com/news/topic/blindhash-technology), [password security](https://blog.associationbenchmarking.com/news/topic/password-security), [ecommerce cybersecurity](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) [0 Comments](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms#comments-listing) For years, large sized banks and corporations have been using [Hardware Security Modules](https://www.cryptomathic.com/news-events/blog/understanding-hardware-security-modules-hsms) (HSMs) to help perform their secure cryptographic operations. HSMs are certified by NIST under FIPS 140-2, which is a set of standards and requirements governing the design of the hardware and software components of the HSM. FIPS 140-2 can provide some assurance that the overall system, including hardware tamper resistance, cryptographic primitives, and even user management and configuration, are designed to resist intrusion. HSMs provide a system to generate and store secret keys, and perform cryptographic operations using those keys inside a protected enclave. In short, an HSM holds secret keys inside a closed-source “black box” which *in theory* an attacker cannot access. [Read More](https://blog.associationbenchmarking.com/news/an-alternative-to-hsms) [![](https://blog.associationbenchmarking.com/hubfs/blog_header_blacklist.jpg)](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far) ## [Once Cracked Twice Shy - A Blacklist Too Far?](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far) February 26, 2018 / by [Jeremy Spilman](https://blog.associationbenchmarking.com/news/author/jeremy-spilman) [0 Comments](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far#comments-listing) [Read More](https://blog.associationbenchmarking.com/news/once-cracked-twice-shy-a-blacklist-too-far) [All posts](https://blog.associationbenchmarking.com/news/all) ### Subscribe to Email Updates - Recent - Popular - Categories ### Lists by Topic - [BlindHash Technology (14)](https://blog.associationbenchmarking.com/news/topic/blindhash-technology) - [password security (10)](https://blog.associationbenchmarking.com/news/topic/password-security) - [ecommerce cybersecurity (5)](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) - [magento (4)](https://blog.associationbenchmarking.com/news/topic/magento) - [ecommerce (3)](https://blog.associationbenchmarking.com/news/topic/ecommerce) - [private clubs (3)](https://blog.associationbenchmarking.com/news/topic/private-clubs) ### Posts by Topic - [BlindHash Technology (14)](https://blog.associationbenchmarking.com/news/topic/blindhash-technology) - [password security (10)](https://blog.associationbenchmarking.com/news/topic/password-security) - [ecommerce cybersecurity (5)](https://blog.associationbenchmarking.com/news/topic/ecommerce-cybersecurity) - [magento (4)](https://blog.associationbenchmarking.com/news/topic/magento) - [ecommerce (3)](https://blog.associationbenchmarking.com/news/topic/ecommerce) - [private clubs (3)](https://blog.associationbenchmarking.com/news/topic/private-clubs) see all ### Recent Posts #### About Us The #1 Benchmarking Technology for Associations of All Sizes. Anyone can create a survey, but only Dynamic Benchmarking can provide your association with the tools to create a study that will truly allow your members the ability to analyze where they stack up compared to their peers. With individualized on-demand reporting and web tools that put the power in your members hands, our technology enhances member engagement and saves your staff time. #### Contact Us [Dynamic Benchmarking info@dynamicbenchmarking.com](mailto:info@dyamicbenchmarking.com)| 603.686.7113