3 ms·

My point is about doing both, if possible, instead of just getting rid of the keys.

• ethbro 8y ago
  Because, as parent noted, making it possible makes your secure enclave more complex (which is the same as less secure). Furthermore, as parent also noted, if your encryption is solid, wiping the keys is identical to wiping the data.
  • gouggoug 8y ago
    Indeed, my bad, I totally read his answer too fast and missed "The encrypted data can and should be wiped too, but it's a lot more reliable to have your security model not rely on that."