6 ms·
global AES-CCM key that Philips uses to encrypt and authenticate new firmware Who on earth authenticates firmware through AES. Even Sony realizes that doesn't
by revelation 10y ago
global AES-CCM key that Philips uses to encrypt and authenticate new firmware
Who on earth authenticates firmware through AES. Even Sony realizes that doesn't work.
(I can already imagine how the idiots fixed this: by drawing another set of bytes for a new "authentication" key..)
- aruss 10y agoIt's theoretically sound with a good HSM. But agreed, I'd rather rely on getting a sound software implementation of an asymmetric signature scheme than rely on protecting a symmetric key with hardware.