HomeCybersecurityHSM Key Custody: 2D Queueing & Exposure-Window Model

HSM Key Custody: 2D Queueing & Exposure-Window Model

Interactive 2D counterpart to the 3D HSM key-custody simulator: a genuine M/M/1 queueing model of the hardware crypto server plus an independent exponential exposure-window decay for stale KEK versions — both computed and numerically verified from scratch, not reprojected from the 3D scene.

Cybersecurity2DModerate60 FPS📱 Mobile-adapted⇄ 3D version
2d-exp-smart-keys-security ↗ Open standalone

This is a genuine, independently-computed 2D counterpart to the 3D HSM key-custody simulator. Instead of a fixed-duration flight animation with no notion of hardware load, it models the HSM's crypto core as a real single-server M/M/1 queue — encryption requests arrive as a Poisson process, wrap operations take an exponentially distributed service time, and the queue visibly backs up the moment request rate approaches the HSM's throughput, exactly as queueing theory predicts. Separately, it tracks a real exposure window for every stored object: after a key rotation, a proactively re-wrapped sample is fixed immediately, and every other object's own random access pattern is what eventually triggers its re-wrap, giving an exponentially decaying "still on the old key" population rather than a single fixed timestep. Both relationships — the M/M/1 queue-length and wait-time formulas, and the exponential exposure decay — were verified against large Monte Carlo runs before shipping; push the request-rate slider above the HSM throughput slider to watch the queue genuinely destabilize.

⚙ Under the hood

A genuine 2D counterpart to the 3D HSM key-custody simulator: the hardware crypto core is modeled as a real M/M/1 queue (Poisson arrivals, exponential service, watch the queue destabilize once request rate approaches throughput) and every stored object's exposure to a superseded key version decays as a real exponential survival curve driven by its own random access pattern, not a fixed one-shot resample. Both relationships were numerically verified against Monte Carlo simulation before shipping.

cybersecuritycryptographyHSMkey managementencryptionKMSqueueing theory

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)