3 ms·
Unless you also want to perform the AES operations in your head, you have to rely on the hardware and software of your computer to perform them. An attacker cou
by ge0rg 10y ago
Unless you also want to perform the AES operations in your head, you have to rely on the hardware and software of your computer to perform them. An attacker could then replace the AES routine you use with one that stores a shadow copy of your key, or exfiltrates it over some covert channel.
- gravypod 10y agoWhat if the crypto side of things is remove-able and carry-able on your person? Or what if it could be subdermally implanted so you know no one can pick pocket you and replace it? Just a thought.
- JoshTriplett 10y ago> What if the crypto side of things is remove-able and carry-able on your person? You might as well have the entire computer removable and portable.
- howardbeware 10y agoAnd that's pretty much what ORWL is.
- Dzugaru 10y agoWell yeah, but this assumes I don't know the fact the physical access had place and proceed to enter the passphrase revealing the key unawaringly afterwards. If this is what "having physical access" means - then yes, I agree, game over, and ORWL solves it. But if I know the attack took place (FBI broke into my house, the computer is locked in a safe etc.) - the data should be secure.