4 ms·
And I would accuse you of thinking in the narrow line of "TPM for media companies to control your hardware". There are other ways to go about this.. Think of t
by kefka 10y ago
And I would accuse you of thinking in the narrow line of "TPM for media companies to control your hardware". There are other ways to go about this..
Think of the ORWL. It's a heavy crypto system that will delete its keys if it's tampered with (heat, cold, shock, pressure, penetration). If I hand these keys to someone else, they have control over the software installed. If they lose the keys, they're out of luck. If the device thinks there's a tampering, they're out of luck.
Now, this may be installed in my datacenter. Awesome. If I mess with it, it's easy to detect. Because everything auto-deletes on tamper. So it is my device by possession, but someone else controls it as I choose for the duration they have the keys.
This would be a great way to run secure systems, as I mentioned further up. Yes, I can run it in a datacenter, but I don't have to trust the datacenter. It's not impenetrable, but it's a heck of a lot better than other solutions.
(Yes, I'm still waiting for reasonably fast homomorphic encryption and processing. But I know that'll be a long time away. Even if Signal is doing some work on that area, the processing side is still about 7000x too slow.)