Local parameter in YubiHSM YubiHSM provides several suitable functions. If we use HMAC-SHA-1: Key is the local parameter "Key handle" is its ID "Data" is output of a KDF HMAC is password hash Diagram (c) Yubico, reproduced under the fair use doctrine