3 ms·
I agree, weak passwords are a big issue. I see your point about bruteforcing that key, however I was more talking about bruteforcing the password. Servers hav
by JoshuaAshton 8y ago
I agree, weak passwords are a big issue.
I see your point about bruteforcing that key, however I was more talking about bruteforcing the password.
Servers have been stolen in the past, and I am not just talking about a big rack server here.
In Android, all you tend to get is an unlock symbol on the bootloader logo, or a warning triangle.
- wepple 8y agoI may be a bit confused. I apologize in advance if I misunderstood. With the desoldering the chip to read the data off, you’ll get an encrypted blob which is encrypted with a securely random 128-bit key, so it’s impossible to crack. the Key and the users password are embedded inside the TEE and cannot be read out - the TEE only provides an interface where you can supply a candidate password, and if you get it correct it’ll provide you the 128-bit key to decrypt your data. It has an internal delay and counter, and will destroy the key if you get the password wrong X number of times. So I’m not sure how you might go about being able to brute force the password, given you can only brute-force online, which is slow and will only give you a small number of attacks.