I don't understand how they extracted the key from the HSM. How is this even possible - the vendor of the HSM should be named!