5 ms·
The data could be stored on an SD card, or emmc flash, or the cloud. Erasing is not reliable there. The more data you have to protect with secure hardware, th
by mcpherrinm 8y ago
The data could be stored on an SD card, or emmc flash, or the cloud. Erasing is not reliable there. The more data you have to protect with secure hardware, the easier a time the attacker has.
Destroying encryption keys stored in a small, secure processor is the most reliable and secure method.
The encrypted data can and should be wiped too, but it's a lot more reliable to have your security model not rely on that.
We have no reason to believe AES-256 will ever be broken within the lifetime of the universe. Maybe in 100 years I will be proven wrong, but I am willing to bet the security of my phone on it.
I suspect we will have human beings living in another solar system before AES-128 is broken.
- gouggoug 8y agoMy point is about doing both, if possible, instead of just getting rid of the keys.
- ethbro 8y agoBecause, as parent noted, making it possible makes your secure enclave more complex (which is the same as less secure). Furthermore, as parent also noted, if your encryption is solid, wiping the keys is identical to wiping the data.
- gouggoug 8y agoIndeed, my bad, I totally read his answer too fast and missed "The encrypted data can and should be wiped too, but it's a lot more reliable to have your security model not rely on that."