# Remote signing on Flow using HSM

**URL:** https://forum.flow.com/t/remote-signing-on-flow-using-hsm/2229
**Category:** Node Operation
**Created:** [July 23, 2021, 10:47pm UTC](https://forum.flow.com/t/remote-signing-on-flow-using-hsm/2229 "2021-07-23T22:47:37Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![vishal](https://avatars.discourse-cdn.com/v4/letter/v/49beb7/32.png) [@vishal](https://forum.flow.com/u/vishal)
#### Post date: [July 23, 2021, 10:47pm UTC](https://forum.flow.com/t/remote-signing-on-flow-using-hsm/2229/1 "2021-07-23T22:47:37Z")

</div>

What is the most straight forward way to implement remote signing for flow when using HSM?

---

<div class="post-metadata">

### Author: ![\_silas](https://avatars.discourse-cdn.com/v4/letter/_/d6d6ee/32.png) [@\_silas](https://forum.flow.com/u/_silas)
#### Post date: [July 27, 2021, 1:10pm UTC](https://forum.flow.com/t/remote-signing-on-flow-using-hsm/2229/2 "2021-07-27T13:10:14Z")

</div>

I operate nodes for Foundry.  
Across all of our protocols we try attain the highest possible levels of security.  
We typically use a HSM for remote signing where possible. This is most easily done with  
tendermint protocols, but I am wondering if there is a way to do this with Flow?

Things I want to know:

- encryption algorithms used
- key migration process
- latency required for signing
- are the key types different across different types of nodes (e.g. do verification and collection nodes use different types of keys

Let me know what you all think, or if anyone has done this already.

Regards,

Silas
