4 ms·

Their hash algorithm takes ~80ms per attempt. All crypto happens on a dedicated AES engine. Files are encrypted with a key derived from UID (device key which ca

by pfg 11y ago

Their hash algorithm takes ~80ms per attempt. All crypto happens on a dedicated AES engine. Files are encrypted with a key derived from UID (device key which cannot be extracted via firmware) and passphrase.

4ad 11y ago
So if the key can't be extracted via the firmware, someone updating the firmware, even with malicious intent, should not be a problem, am I correct?
- pfg 11y ago
  With a sufficiently complex passphrase, it's not a problem. With a typical 6-digit PIN, disabling the artificial delay and auto-wipe (which is possible via firmware updates) is all you need for a successful brute-force attack.
  - 4ad 11y ago
    Thanks for the clarifications.