4 ms·
I think Google uses this same Titan chip for it: https://cloudplatform.googleblog.com/2017/08/Titan-in-depth-security-in-plaintext.html https://cloudplatform.g
by mtgx 8y ago
I think Google uses this same Titan chip for it:
https://cloudplatform.googleblog.com/2017/08/Titan-in-depth-security-in-plaintext.html https://cloudplatform.googleblog.com/2017/08/Titan-in-depth-...
I'm not sure if this is the "hardware security module" they've been touting for Pixel 2 devices, too.
I assume this project was spun-off from Project Vault, or at least they re-used some of the ideas/code from that, but it's still a shame we won't be getting the microSD "HSM" anymore. I guess that idea died when Google and other manufacturers decided to kill support for microSD in their devices altogether.
https://techcrunch.com/2015/05/29/googles-project-vault-is-a-secure-computing-environment-on-a-micro-sd-card-for-any-platform/ https://techcrunch.com/2015/05/29/googles-project-vault-is-a...
This is Yubico's response to the Titan Key announcement, if you care to read it:
https://www.yubico.com/2018/07/the-key-to-trust/ https://www.yubico.com/2018/07/the-key-to-trust/
- gonvaled 8y agoregarding yubico: they talk open, global standards, but then say security can only be met by producing in the USA (and Sweden!). Why should I trust USA produced products?
- albntomat0 8y agoLooking at the list of IC exports[0], where should they be produced that will be trusted by the vast majority of those who care? [0]: https://en.wikipedia.org/wiki/List_of_countries_by_integrated_circuit_exports https://en.wikipedia.org/wiki/List_of_countries_by_integrate...
- whitepoplar 8y agoNow I'm wondering how Malta made the top-20 list of IC export countries.
- moviuro 8y agoMeh... "open" https://www.yubico.com/2016/05/secure-hardware-vs-open-source/ https://www.yubico.com/2016/05/secure-hardware-vs-open-sourc...
- teamhappy 8y agoYou might like Nitrokey: https://www.nitrokey.com/ https://www.nitrokey.com/
- mtgx 8y agoYeah, that stood out to me, too. It's kind of funny that they're using the "open" as a competitive advantage against Google, when they no longer have that competitive advantage. I bet they wish they had stayed open right about now.