5 ms·

Devil's advocate, they might not have had to build a new tool.

by jonesetc 11y ago

r1ch 11y ago
Seems possible. Pretty much every Android device has disk encryption disabled by default for performance reasons.
- russell_h 11y ago
  Disk encryption is required to be enabled by default on any device shipped with Android 6 (Marshmallow). There is an exemption for very slow phones, but I'd guess that most new medium or high end phones have it enabled now.
  - mentat 11y ago
    Without hardware keystore for the key encryption key it's sort of pointless as you can extract and brute force with any PBKDF2 round count that will be acceptable for a mobile user.
    - bduerst 11y ago
      Hasn't Android supported that since 2012? http://developer.android.com/about/versions/android-4.3.html#HardwareKeyChain http://developer.android.com/about/versions/android-4.3.html...
      - mentat 11y ago
        I'm not sure if / how that's integrated into encrypted disk nor how prevalent having a TPM like chip is. TrustZone has had a lot of vulnerabilities.
- bduerst 11y ago
  The majority of Android 6.0+ phones have disk encryption enabled by default. Previous android phones didn't have the hardware to handle the workload.
whitegrape 11y ago
It would be surprising. Snowden's confirmations pissed off a lot of people in tech and either effected or hastened plans to build more secure systems in tech companies. (See for instance https://www.techdirt.com/articles/20131106/00235225143/pissed-off-google-security-guys-issue-fu-to-nsa-announce-data-center-traffic-now-encrypted.shtml https://www.techdirt.com/articles/20131106/00235225143/pisse...)
- allemagne 11y ago
  From the link you gave, the "Google Security Guys" seem to be specifically protesting "industrial-scale subversion of the judicial process" by the NSA. This wouldn't preclude active cooperation with law enforcement or designing systems meant to comply with warrants (where a truly secure system would make this impossible).
sixothree 11y ago
Devils advocate not even necessary. It's right there in the quote. Is there another reason to be so specific?

Devil's advocate, they might not have had to build a new tool.

r1ch 11y ago

Seems possible. Pretty much every Android device has disk encryption disabled by default for performance reasons.

russell_h 11y ago
Disk encryption is required to be enabled by default on any device shipped with Android 6 (Marshmallow). There is an exemption for very slow phones, but I'd guess that most new medium or high end phones have it enabled now.
- mentat 11y ago
  Without hardware keystore for the key encryption key it's sort of pointless as you can extract and brute force with any PBKDF2 round count that will be acceptable for a mobile user.
  - bduerst 11y ago
    Hasn't Android supported that since 2012? http://developer.android.com/about/versions/android-4.3.html#HardwareKeyChain http://developer.android.com/about/versions/android-4.3.html...
    - mentat 11y ago
      I'm not sure if / how that's integrated into encrypted disk nor how prevalent having a TPM like chip is. TrustZone has had a lot of vulnerabilities.
bduerst 11y ago
The majority of Android 6.0+ phones have disk encryption enabled by default. Previous android phones didn't have the hardware to handle the workload.

whitegrape 11y ago

It would be surprising. Snowden's confirmations pissed off a lot of people in tech and either effected or hastened plans to build more secure systems in tech companies. (See for instance https://www.techdirt.com/articles/20131106/00235225143/pissed-off-google-security-guys-issue-fu-to-nsa-announce-data-center-traffic-now-encrypted.shtml https://www.techdirt.com/articles/20131106/00235225143/pisse...)

allemagne 11y ago
From the link you gave, the "Google Security Guys" seem to be specifically protesting "industrial-scale subversion of the judicial process" by the NSA. This wouldn't preclude active cooperation with law enforcement or designing systems meant to comply with warrants (where a truly secure system would make this impossible).

sixothree 11y ago

Devils advocate not even necessary. It's right there in the quote. Is there another reason to be so specific?