Broken is the wicked idea of HSMs. I'm fucking repeating this over and over and over:
FUCKING CONCENTRATE PLEASE: HSMs DO NOT PROTECT KEY METERIAL CRYPTOGRAPHICALLY.
To avoid another extreme fuckup, please fucking learn what a KDF is and how encryption fucking works.
You need ENTROPY to protect y...