Oct 16, 2018

In both models you must trust the manufacture of the device. The HSM (of done properly) simply raises the cost of getting the secrets out of the device (assuming one doesn't already have that authority).